topic Re: Splunk SC4S and barracuda in Getting Data In

Splunk SC4S and barracuda

njusticesnb — Thu, 30 Dec 2021 18:21:16 GMT

Hello,

I am new to Splunk. I have successfully got our SC4S server setup and sending info to Splunk. I am working on getting data in from our Barracuda Web Filter. The data is going in but getting assigned a source type of nix:syslog. I have installed the BarracudaWebFilter app in Splunk but for it to work I am reading the sourcetype needs to be "barracuda". I believe I need to add a line in the splunk_metadata.csv file on the SC4S server but not sure what it should be. Anybody else set this up and have any info the could provide.

Thanks,

Re: Splunk SC4S and barracuda

blbr123 — Fri, 14 Jan 2022 18:33:39 GMT

Hi can you help with the steps for setting up the sc4s server for getting syslog data into Splunk , I have gone through the document but it's quite confusing.

Re: Splunk SC4S and barracuda

abk_hexion — Thu, 05 May 2022 22:32:00 GMT

Hi @njusticesnb if you can help with the steps for setting up the sc4s server for getting syslog data into Splunk it will be really helpful