https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Apache-vs-pretrained-sourcetypes/m-p/498531#M61347 <P>Is the Apache Add-on falling out of favor?</P> <OL> <LI>It hasn't been updated since 1.0.0 release</LI> <LI>It doesn't officially support 7.3 or 8.0 (though unofficially it works fine)</LI> <LI>Splunk can natively parse apache logs using the <EM>access_combined</EM> and <EM>apache_error</EM> pretrained sourcetypes</LI> <LI>If you need more thorough CIM mapping than the pretrained sourcetypes offer, then there's an unofficial 'Add-on for Access Combined' available on splunkbase that does the job with fewer field extractions than the Apache add-on, and without the need for another sourcetype</LI> </OL> Wed, 27 Nov 2019 20:10:34 GMT satyenshah 2019-11-27T20:10:34Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Apache-vs-pretrained-sourcetypes/m-p/498531#M61347 <P>Is the Apache Add-on falling out of favor?</P> <OL> <LI>It hasn't been updated since 1.0.0 release</LI> <LI>It doesn't officially support 7.3 or 8.0 (though unofficially it works fine)</LI> <LI>Splunk can natively parse apache logs using the <EM>access_combined</EM> and <EM>apache_error</EM> pretrained sourcetypes</LI> <LI>If you need more thorough CIM mapping than the pretrained sourcetypes offer, then there's an unofficial 'Add-on for Access Combined' available on splunkbase that does the job with fewer field extractions than the Apache add-on, and without the need for another sourcetype</LI> </OL> Wed, 27 Nov 2019 20:10:34 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Apache-vs-pretrained-sourcetypes/m-p/498531#M61347 satyenshah 2019-11-27T20:10:34Z