topic Re: Event Generator in Getting Data In

Event Generator

mha_it_network — Sun, 07 Oct 2012 07:34:55 GMT

Hi,

Is there a free event/log generator for Windows avalable that i can use to emulate firewalls, database e.t.c.

I am trying to get in sample data into splunk

I would very much appreciate some assistance

Re: Event Generator

kallu — Sun, 07 Oct 2012 11:52:46 GMT

If you just want to setup a Splunk demo, maybe sampledata.zip from Splunk tutorial could do? It's not Windows nor firewall or db logs, but on a plus side you get ready-made use-cases for you demo from tutorial with minimal effort. Link to sampledata.zip is at http://docs.splunk.com/Documentation/Splunk/latest/Tutorial/GetthesampledataintoSplunk

If you really want to generate logs (ie simulate) for network devices then you should take a look at http://www.gns3.net/

Re: Event Generator

rwigand — Mon, 17 Dec 2012 17:14:31 GMT

just saw your post. Maybe the built-in command "eventcreate" under Windows is what you are looking for? It ships with newer Windows versions and generates eventlog entries from commandline. So if you build a loop around it it may be able to fill your eventlog with errors. here is an example:

eventcreate /T ERROR /ID 4711 /L APPLICATION /D "This is a demo error!"

or:

eventcreate /T WARNING /ID 4712 /L SYSTEM /D "just a warning in the system log"

Re: Event Generator

Wilcooley — Thu, 31 Jan 2013 19:39:30 GMT

There is eventgen, which was extracted from one of the official Splunk apps. I'm not sure why it isn't included in SplunkBase.

Re: Event Generator

crt89 — Tue, 25 Jun 2013 03:50:12 GMT

Thanks for the information @rwigand. I was also looking for this and made a script out of your comment.