https://community.splunk.com/t5/Getting-Data-In/How-to-import-cef-data-from-data-source-in-splunk-enterprise/m-p/325838#M93093 <P>I tried many times to import raw data (CEF) from another SIEM (just to test) and configured to send data to a specific port with zero results.<BR /> Any ideas on what is the correct procedure to do this?<BR /> Thanks</P> Tue, 10 Apr 2018 14:15:32 GMT sampy93 2018-04-10T14:15:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-import-cef-data-from-data-source-in-splunk-enterprise/m-p/325838#M93093 <P>I tried many times to import raw data (CEF) from another SIEM (just to test) and configured to send data to a specific port with zero results.<BR /> Any ideas on what is the correct procedure to do this?<BR /> Thanks</P> Tue, 10 Apr 2018 14:15:32 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-import-cef-data-from-data-source-in-splunk-enterprise/m-p/325838#M93093 sampy93 2018-04-10T14:15:32Z https://community.splunk.com/t5/Getting-Data-In/How-to-import-cef-data-from-data-source-in-splunk-enterprise/m-p/325839#M93094 <P>you can take data directly from CEF to splunk, there is also an app for it:<BR /> <A href="https://splunkbase.splunk.com/app/1847/#/overview">https://splunkbase.splunk.com/app/1847/#/overview</A><BR /> installation and configuration here:<BR /> <A href="http://docs.splunk.com/Documentation/CEFapp/2.0.1/DeployCEFapp/AboutSplunkAppforCEF">http://docs.splunk.com/Documentation/CEFapp/2.0.1/DeployCEFapp/AboutSplunkAppforCEF</A><BR /> what is the other SIEM tool?</P> Tue, 10 Apr 2018 17:30:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-import-cef-data-from-data-source-in-splunk-enterprise/m-p/325839#M93094 adonio 2018-04-10T17:30:50Z