topic Re: Can the Splunk Add-on for Juniper extract SRX logs? in Getting Data In

Can the Splunk Add-on for Juniper extract SRX logs?

esalmon — Fri, 04 Sep 2020 05:09:43 GMT

Hi, I'm bring SRX data into Splunk but the fields aren't getting extracted by the Juniper Add-On.

Can the Juniper Add-On parse SRX logs? And if so, what could be the issue? The logs are coming in, but its not searchable since there's no field extractions.

Re: Can the Splunk Add-on for Juniper extract SRX logs?

shaahin — Sat, 12 Jun 2021 08:36:46 GMT

i have the same issue. i dont know what sourcetype should be set in input file. srx forwarding logs via syslog on UDP:514.

any help?

Re: Can the Splunk Add-on for Juniper extract SRX logs?

jmantor — Mon, 01 Nov 2021 15:06:59 GMT

I'd like some clarification on this as well. Does the TA select the correct source type for these events?

Re: Can the Splunk Add-on for Juniper extract SRX logs?

Kaiser-0522 — Wed, 08 Mar 2023 08:43:53 GMT

Recently I also encountered the same situation, through various troubleshooting, the problem in the Splunk Add-on for juniper the add-on does not apply