http://www.splunkbase.com/feed/apps.rss/Reports Latest Splunk Apps filtered by Reports ndoshi Wed, 08 Sep 2010 16:44:57 +0000 http://www.splunkbase.com/apps/Reports/app:Global+Threat+Landscape%7FIP+Watch+list+V2 7040bc825fca0dac002d8e2414fa9e4c NOTE: You MUST install (gunzip/untar into $SPLUNK_HOME/etc/apps) the amMap and MAXMIND add-ons from Splunkbase.com before installing this app. This app indexes a list of possible bad IP addresses and domain names that have appeared on a daily IP watch list. A default dashboard has been provided to geolocate the addresses by country and city. Further instructions are in the README.txt. To run this on Windows, you will have to install curl on your machine and put it in your PATH. patrik Fri, 06 Aug 2010 13:56:13 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Snort+-+Splunk+4.x 835811097c4351dee298810a39a4b784 Splunk for Snort provides field extractions for Snort alert logs (fast and full) as well as dashboards, saved searches, event types, tags and event search interfaces. ndoshi Tue, 03 Aug 2010 21:57:33 +0000 http://www.splunkbase.com/apps/Reports/app:Monitor+Radio+Stations 14ebd9ba4f4d72dd3728b10706b7ab0f Turn SplunkWeb into a gateway for audio entertainment. This app indexes lists of songs currently being played by radio stations. It employs the creative commons licensed REST API served by http://api.yes.com to gather information by radio station call letters. To install, gunzip/untar (tar zxvf) the distribution into $SPLUNK_HOME/etc/apps and read the README.txt. You can monitor your own radio stations. The app comes with 2 dashboards, 8 reports, and 3 drop down form searches. It has workflow actions that can be used to search for a song, artist, lyrics, and also see if the radio station has a site to listen to it live online. This release also has a dashboard panel to play your own list of Internet Radio Stations within the panel. Enjoy. Disclaimer: This app should be used for informational purposes and is delivered as is. The use or misuse of the app is not the responsibility of Splunk or the author. johnmark Fri, 23 Jul 2010 01:35:53 +0000 http://www.splunkbase.com/apps/Reports/app:Web+Analytics 039a2548ae049909d788631b2068e5f2 Splunk your web server and apps - get all the info on referrers, page hits, and visits from your logs, then turn on the Splunk analytics engine for rich data from your web servers. Splunk Tue, 20 Jul 2010 21:05:13 +0000 http://www.splunkbase.com/apps/Reports/app:Search 8771486b46c3493bda54e3b684d2beb7 Search is the Splunk interface for searching and analyzing IT data. It allows you to index data into Splunk, add knowledge, build reports, and create alerts. Splunk 4.0 includes a brand new search and reporting interface, and pre-built useful dashboards for monitoring your Splunk installation. The Search App can be used across many areas of IT including infrastructure management, application management, security and compliance. Splunk Tue, 20 Jul 2010 21:04:49 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Unix+and+Linux 321538ce30f9b1b686366e44418980db Splunk for *nix provides pre-built data inputs, searches, reports, alerts and dashboards for Linux and Unix management. Now you can monitor, manage and troubleshoot *nix operating systems from one place with Splunk for *nix. Included are a set of scripted inputs for collecting CPU, disk, I/O, memory, log, configuration and user data. The app makes getting started with Splunk a breeze. Splunk Tue, 20 Jul 2010 21:04:30 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Windows b4f0da0fdaf839ce53d1ec80a22d14e9 Splunk for Windows provides pre-built data inputs, searches, reports, alerts, and dashboards for Windows server and desktop management. You can monitor, manage, and troubleshoot Windows operating systems from one place. Included are scripted inputs for CPU, disk, I/O, memory, log, configuration, and user data, plus a web-based setup UI for indexing Windows Events Logs. The app makes getting started with Splunk a breeze. Splunk Tue, 20 Jul 2010 18:00:41 +0000 http://www.splunkbase.com/apps/Reports/app:PDF+Report+Server+-+install+on+Linux+only 84a5ec1e7d748edeff4499dea120e97a The PDF Report Server add-on enables your Linux-based Splunk instance to generate emailed reports in PDF format. IMPORTANT: it is only compatible with Intel-based Linux systems and requires the Xvfb and xauth operating system packages to be installed. See the documentation for further details. Instances of Splunk running on non-Linux OS's (Solaris, Windows, etc.) cannot run the PDF Report Server, but they can be configured to use a remote Linux-based Splunk server with this add-on installed to generate PDFs. This add-on requires an Enterprise license and will not work with a Free license. For more information, see: http://www.splunk.com/base/Documentation/4.1/Installation/ConfigurePDFprintingforSplunkWeb lukeh Mon, 19 Jul 2010 06:39:07 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Nagios 6db8027da5663b478545690f7f5f9b76 Splunk For Nagios allows you to integrate the Open Source monitoring solution "Nagios" with Splunk. Now you can search Nagios alerts and notifications and trend problems over time. The app also allows you to Schedule Saved Searches in Splunk to send alerts to Nagios. Over 40 field extractions are included, as well as 6 Saved Searches, and an Advanced Dashboard featuring recent Warning and Critical Alerts. V_at_Splunk Wed, 23 Jun 2010 23:55:23 +0000 http://www.splunkbase.com/apps/Reports/app:Field+Perf+Benchmark ac05e1d81aacc517f16cfcc403c41735 How fast is Splunk? Benchmark your datasets, on your hardware. In other words, measure performance. will Wed, 23 Jun 2010 21:19:22 +0000 http://www.splunkbase.com/apps/Reports/app:Cisco+Client+Security+Agent+Add+On 582eca039c8f5b649419197095ed6562 Splunk for Cisco Security Agent (CSA) is a collection of field extractions that allows for historical and real-time views of host events as registered by CSA with supporting fields. Configuration instructions and comments can also be found here: http://answers.splunk.com/questions/3358/how-do-i-install-the-cisco-csa-add-on will Wed, 23 Jun 2010 21:18:52 +0000 http://www.splunkbase.com/apps/Reports/app:Cisco+Firewalls b36c595faba6515a998c28299ac9654f Field extractions, sample reports and dashboards for Cisco ASA, PIX and FWSM Firewalls Configuration instructions and comments can also be found here: http://answers.splunk.com/questions/3366/how-do-i-install-the-cisco-firewall-add-on will Wed, 23 Jun 2010 21:18:21 +0000 http://www.splunkbase.com/apps/Reports/app:Cisco+MARS+Archive+Add-on 6b3fd489a3de3039b2d4df55ade9847f Props file for handling MARS raw messages. Reports and dashboard included for xml formatted IPS archives. will Wed, 23 Jun 2010 21:17:55 +0000 http://www.splunkbase.com/apps/Reports/app:Cisco+IronPort+Web+Security+Application 2a5ee380fa8230f908b3df78588d7fa1 Splunk for Ironport Web Security (WSA) is a collection of field extractions, saved searches and dashboards that represent blocked sites by category or client IP, number of events per host, actions by host over time, and other security relevant events that can be reported for adherence to corporate compliance policies.' For instructions on how to configure the Cisco IronPort Web app please visit: http://answers.splunk.com/questions/3362/how-do-i-install-and-configure-the-splunk-for-ironport-web-app-on-splunkbase ndoshi Wed, 02 Jun 2010 03:01:56 +0000 http://www.splunkbase.com/apps/Reports/app:Weather+Alerts 826fbfa4d6fce6b3004ac6d6dcbe22e2 This app uses the REST API from the weather underground to index weather alerts from the NWS every hour for user defined USA zip codes. A sample dashboard is provided with 6 reports and a sample scheduled search is provided to provide an email alert for severe weather conditions. One workflow action is also provided for example purposes. Read the included README.txt for installation and start monitoring for severe weather alerts. joshs Wed, 14 Apr 2010 14:24:33 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+License+Usage 42617110e606da673fcdc71fe2b896e5 This app provides a new dashboard which has several widgets that query to help you determine your Splunk license usage total over the past 24 hours as well as usage by host, source, and sourcetype. It contains timecharts to help you understand usage over time and see usage spikes as well as pie charts to help you to figure out which log files, sourcetypes, and hosts Splunk is indexing the most data from. splunk-bluecoat Thu, 11 Mar 2010 05:17:41 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Blue+Coat 5f4123d0e71640e792a1687b5a826631 Splunk for Blue Coat provides search, alerting and reporting for large-scale Blue Coat environments. Pre-defined searches, reports and dashboards for Traffic Analysis, Bandwidth Reporting, Security Investigations and User Behavior combined with the power of Splunk search gives you the visibility and intelligence you need. If you use Blue Coat for Secure Web Gateway, WAN Optimization or Application Performance Monitoring, you'll find Splunk for Blue Coat indispensable. splunk-f5 Mon, 25 Jan 2010 11:59:26 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+F5 ee76008be1d95fb53916ac0abb034585 Splunk and F5 are working together to provide real time reporting and intelligence for the ASM and PSM product lines. You rely on F5 Networks solutions like BigIP Global Traffic Manager, Local Traffic Manager, ASM, Firepass, WANOPT and ARX to keep your mission critical applications running and achieve IT agility. Your way. Now you can rely on Splunk for F5 to search, alert, report and make decisions in real time. Pre-defined searches, reports and dashboards make it quick to get started and with the power of Splunk you can customize Splunk for F5 to meet the specific needs of your agile IT environment. **Please note the current application includes support for ASM and PSM products only** joshs Wed, 20 Jan 2010 19:46:38 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+Monitoring e8fa2d3f8f445cd7b169eecd3b69c44f The Splunk Monitoring application can be used to monitor your Splunk forwarding nodes from your indexing node using an nmap query script. It creates a new "splunk_monitoring" index and has a single dashboard that displays the overall number of servers that are UP or DOWN as well as the status of each individual server. To use the Splunk Monitoring application, extract the files into your $SPLUNK_HOME/etc/apps directory. The actual monitoring script uses nmap so make sure you have it installed on your indexing node. Edit the $SPLUNK_HOME/etc/apps/splunk_monitoring/local/tags.conf file to include a list of your servers (the actual tag doesn't matter) or edit the $SPLUNK_HOME/etc/apps/splunk_monitoring/bin/splunk_port_monitor.sh script to point to a different location for the tag_file variable. You will also want to edit that file if you run Splunk on a port other than 8089 or if your nmap executable is located in a location other than /usr/bin/nmap. Splunk Sun, 19 Jul 2009 09:09:26 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+Enterprise+Security+Suite dc4dbcd309a44d01ac24912051d1b71a Splunk Enterprise Security Suite (ESS) brings the power of Splunk to security information and event management (SIEM). Compliance reporting, incident investigation, log management, security posture monitoring and event correlation are now easy to deploy, scale and maintain with Splunk's universal data collection, ad-hoc search, real time alerting and large scale reporting. ESS includes six security domains; Security Posture, Access Control Protection, Endpoint Protection, Network Protection, Incident Response and Audit/Data Protection. ESS uses the Splunk Common Information Model (SCIM) to integrate with other Splunk Solution Suites and external systems like service and help desks. And all of this is backed by Splunk Professional Services delivery. If you've hit the wall with your existing SIEM or are just getting started looking for an enterprise security solution, contact us and we'll show you how Splunk Enterprise Security Suite just works better. Splunk Sat, 18 Jul 2009 23:10:06 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+PCI+Compliance+Suite 4032f03d58c190d862ec3693789c6795 Splunk PCI Compliance Suite covers all twelve PCI DSS requirements and all 228 sub-requirements including live controls monitoring, process workflow, checklists and reporting. Get a broader and deeper view of your compliance posture with Splunk’s universal indexing to handle any data source including complex application logs and configurations. Collect and retain all your log and configuration data even if your PCI domains are generating terabytes every day. Efficient workflows for audit-trail review and built in change monitoring eliminate the need for additional technologies and point product purchases to pass your PCI DSS audit. Eliminate unnecessary developer and IT access to production systems keeping PCI DSS exceptions to a minimum. PCI uses the Splunk Common Information Model (SCIM) to integrate with other Splunk Solution Suites and external systems. And it is backed by Splunk Professional Services delivery. Contact us and we'll show you how Splunk PCI Compliance Suite just works better. ckotil Wed, 06 May 2009 19:07:50 +0000 http://www.splunkbase.com/apps/Reports/app:Nagios+sevice+check+to+monitor+the+size+of+daily+index 91d693711eaef4fe9e500ff69dbb866e This Nagios service check allows a user to define a threshold in amount of bytes that will raise an alarm when the splunk daily index surpasses this amount. ogdin Fri, 27 Mar 2009 19:50:26 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Solaris+Zones 98828a19510cec1e7bf9532a47bb78cb The Splunk for Solaris Zones application is similar to the system monitoring capabilities in the Splunk for UNIX app. Splunk for Zones uses zone capable options in commands like prstat and ps but also introduces the ability to grab statistics directly from running zones using zlogin. kordless Tue, 24 Mar 2009 22:56:03 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Double-Take 683c032cb93312f7d99ceb91e4ec2bb9 Splunk for Double-Take, a collaborative platform, brings higher system availability, lower cost of maintaining availability, and simplified monitoring of business critical Microsoft Exchange and SQL Server environments. By adding the power of Splunk IT Search into the Double-Take offering, users can tap into the capabilities of real-time search, alerting, reporting and analysis, to aggressively and proactively ensure successful failover conditions through a broader view of their environment. Splunk Mon, 23 Mar 2009 23:06:28 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+PCI+for+Splunk+3.x dee992af056843fe38d6ed22d52676c5 The Splunk PCI application offers over 57 reports, more than 91 saved searches, a dashboard, and corresponding alerts you can use to satisfy PCI requirements such as secure remote access, file integrity monitoring, secure log collection, daily log review, audit trail retention, and PCI control reporting. Splunk Thu, 19 Mar 2009 20:43:50 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Network+Security 8a48676a95f0f7c3a5c567aa9f159b0e The Splunk Network Security application offers a set of reports, saved searches, and dashboards, as well as corresponding alerts that you can use to monitor your firewalls, intrusion detection and prevention systems, as well as operating systems. Splunk Thu, 19 Mar 2009 17:46:47 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Change+Management 95d9940cef25692b9483d352c8ed494c Splunk for Change Management provides predefined reports and dashboards to facilitate change auditing, change detection, change reporting, change validation and incident response based on change events, change tickets and configuration files. BobFox Mon, 02 Mar 2009 05:10:10 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+MySQL 439a2b24b9269bfb45453f9316a7687b A collection of Splunk scripted inputs, eventtypes, and reports for MySQL monitoring and diagnostics. ymiranda Mon, 23 Feb 2009 18:53:53 +0000 http://www.splunkbase.com/apps/Reports/app:Nagios+3.0.6 b39c542f6112ccda7b55c7aba0088926 integration fo a nagios3.0.6 xxxxxxxxxxxxxxxxxxx will Wed, 11 Feb 2009 05:14:33 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+use+with+Palo+Alto+Networks 1f51a9958949c2e6cf5734a8dd2cab7e Splunk and Palo Alto Networks have developed an application which provides users with fingertip access to the wealth of information on applications, users and content that Palo Alto Networks next generation firewalls generates. The evolution of the application and threat landscape has resulted in a loss of visibility and control over applications, users and content. The loss of visibility and control exposes enterprises to business risks including network downtime, increased operational expenses, and data loss through unauthorized data transfer. will Wed, 21 Jan 2009 03:21:04 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+F5+DEMO+App+With+Sample+Data+Generation 466e165ca86291e826dbc267b799f3a1 ***********THIS APP WILL PRODUCE SAMPLE DATA IN YOUR SPLUNK INSTANCE************* ****IF YOU ARE LOOKING FOR THE SPLUNK FOR F5 App please download it here: http://www.splunkbase.com/apps/All/Security/app:Splunk+for+F5+Networks ************ The Splunk for F5 DEMO app is a Splunk application which demonstrates the capabilities of Splunk on F5 Application Firewall data. This application will generate F5 ASM data at 7eps and load it into your Splunk instance the entire time the Splunk instance is running. *YOU WILL NEED TO DISABLE THIS APP TO HALT DATA PRODUCTION* It demonstrates Splunk's capabilities by providing field extractions, reports and dashboards on the data being generated. If your curious about Splunk but do not have data to test with, this is the application for you. Splunk Tue, 06 Jan 2009 20:43:45 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+CISCO+PIX 740e6413701ddc9ceccf7ac81e2f90c6 Cisco PIX firewall log bundle that indexes and extracts common fields, normalizing PIX firewall logs so they are Splunk-compliant and will work with other Splunk applications. canuck Sat, 20 Dec 2008 04:53:27 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Windows+Firewall 54da1f092f1653bf7c75a4021997ccad Splunk for Windows Firewall provides field extractions, event types, and saved searches for Windows firewall logs. Splunk Thu, 18 Dec 2008 23:53:52 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+Windows+for+Splunk+3.x 47060fc48e4f93e3795890aafc5c8267 Splunk for Windows application is a compilation of saved searches, eventtypes, inputs, and field extractions for Windows. The extractions are compatible with the Splunk Common Information Model. The application also contains an integration for Microsoft’s System Center Operations Manager. canuck Tue, 16 Dec 2008 00:07:43 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+for+IIS+W3C+extended b08b68565e9f2bdbbf9fb0a17854ad27 The Splunk for IIS W3C extended application adds several saved searches which can be used for reporting and alerts. In the near future this application will also add several event types related to common IIS attacks. 76trombones Mon, 24 Nov 2008 19:00:55 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+Enterprise+Manager 429d0908962f52c45985ddeec033cce0 A Splunk application that provides visibility into the connectivity of Splunk forwarders to one or more indexers, the availability of Splunk forwarders and indexers, the data volumes passed by forwarders and the data volumes consumed by indexers. Displayed within a dashboard view. Splunk Tue, 14 Oct 2008 17:50:11 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+Assist+Application 16d461f792b145f5013e340ef71a503a The Splunk assist application is to be used for troubleshooting, monitoring, and enhancing the performance of Splunk. The application contains a group of files that contains searches and configuration options that will assist in your use of Splunk. kordless Mon, 28 Apr 2008 09:04:09 +0000 http://www.splunkbase.com/apps/Reports/app:Splunk+Globe da984f6d31188f2ac3b28eb6522453dd Splunk Globe uses the Poly9 FreeEarth plugin. Splunk Globe queries a Splunk instance for the most recent IP addresses, then plots them on the globe. Updates occur in near real-time. ssorkin Thu, 06 Mar 2008 01:23:34 +0000 http://www.splunkbase.com/apps/Reports/app:Web+access+reports 9f1b09f6b813de49dab86ad3a7ab8674 Provides saved web access reports that you can access when needed. nick Wed, 05 Mar 2008 21:37:27 +0000 http://www.splunkbase.com/apps/Reports/app:twiki+logs 5a4fe80afcf0571e3f24ed6bf20bf0ae Contains the basic extractions as well as some saved searches, reports, event types, and custom dashboard modules.