Firewalls Fields Applications
Want to custom-define fields in your events?
Field Applications let you download field definitions to install in your Splunk server, or share fields you made yourself! Even better, an Application can have more than one type of content, so you can add fields to any Application.
Not a Splunk user? Download Splunk, set up your Splunk server, and then install your Applications(s) to extend your server.
Featured Application:
CheckPoint OPSEC LEA Application
More...
- Recent
- |
- Highly Rated
- |
- Most Downloaded
Splunk for CISCO PIX
Cisco PIX firewall log bundle that indexes and extracts common fields, normalizing PIX firewall logs so they are Splunk-compliant and will work with other Splunk applications.
IPFW Firewall
This application contains field extractions and eventtypes for IPFW firewall log files.
OpenBSD Packet Filter
This bundle contains field extractions and eventtypes for OpenBSD firewall events.
nscreen
This bundle is for field extraction and reporting on netscreen firewalls
CheckPoint OPSEC LEA Application
This application contains an OPSEC LEA application to drop into Splunk 3.0 or later, offering a client, event types, and field extractions. It functions on Linux and on Solaris with gmake and gcc installed. The application conforms with the Splunk application standard, meaning that it uses common field names for its data.
Checkpoint Event Field Extraction
Search-time parsing of following fields: loc, time, action, orig, i/f_dir, i/f_name, has_accounting, uuid, product, src, dst, proto, rule
Watchguard Firebox
Field Extractions for Watchguard Firebox
Sonicwall Firewall
This bundle performs field extractions for sonicwall TZ 170 without the UTM/IDS modules
iptables fields, inputs, and event types
This add-on applies to iptables firewall logs, normalizing their field names so they work well with other Splunk applications.