https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109130#M22960 <P>Triton integrates with 3rd party SIEM by configuring it to send a syslog feed (TPC or UDP) as key-value pairs to splunk.</P> <P>Would you rather stream to a syslog server and have splunk tail the resulting file? (better i guess?)</P> Wed, 07 Oct 2015 01:07:42 GMT Conradj 2015-10-07T01:07:42Z https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109128#M22958 <P>Has anyone added Websense data to Splunk and would you mind sharing that process?</P> Tue, 15 Nov 2011 20:03:26 GMT https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109128#M22958 sanderp 2011-11-15T20:03:26Z https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109129#M22959 <P>The recommended approach is to scrape the Websense MSSQL database, specifically the log tables, using a scripted input that outputs the contents of these tables to an appended log file that Splunk indexes.</P> Tue, 15 Nov 2011 22:13:34 GMT https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109129#M22959 araitz 2011-11-15T22:13:34Z https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109130#M22960 <P>Triton integrates with 3rd party SIEM by configuring it to send a syslog feed (TPC or UDP) as key-value pairs to splunk.</P> <P>Would you rather stream to a syslog server and have splunk tail the resulting file? (better i guess?)</P> Wed, 07 Oct 2015 01:07:42 GMT https://community.splunk.com/t5/Getting-Data-In/Import-Websense-data-to-Splunk/m-p/109130#M22960 Conradj 2015-10-07T01:07:42Z