Network Security Inputs Applications

Want to define new inputs for your Splunk server?

Input Applications let you download pre-made definitions for bringing even more data into your Splunk server. Or, you can share your own! Along with those definitions, since Applications allow you to include more than one type of content, you can roll together a complete solution for a particular situation or program.

Not a Splunk user? Download Splunk, set up your Splunk server, and then install your Applications(s) to extend your server.

Sancp/Sguil Add-on

This bundle indexes sancp logs when sancp is patched with the sguil output patch, extracts the fields, then sends to a processor which converts the decimal IP addresses to dotted format.

Author: araitz Type: Inputs, Custom Processing
Rating: Awaiting 3 votes Added: 9 months ago
Downloads: 29 Last Updated: 9 months ago
License: Creative Commons Price: Free
Categories:
Screenshot

Splunk for Network Security

The Splunk Network Security application offers a set of reports, saved searches, and dashboards, as well as corresponding alerts that you can use to monitor your firewalls, intrusion detection and prevention systems, as well as operating systems.

Author: Splunk Type: Searches, Reports, Inputs, Fields, Event Types, Alerts
Rating: Awaiting 3 votes Added: 13 days ago
Downloads: 209 Last Updated: 3 days ago
License: Creative Commons Price: Free
Categories: