https://community.splunk.com/t5/Getting-Data-In/Splunk-with-suricatanot-reading-eve-json/m-p/349771#M94869 <P>Can you share inputs.conf you are using?</P> Fri, 20 Apr 2018 04:19:06 GMT p_gurav 2018-04-20T04:19:06Z https://community.splunk.com/t5/Getting-Data-In/Splunk-with-suricatanot-reading-eve-json/m-p/349770#M94868 <P>I have checked suricata TA app for reading intrusion but as I see it doesn't read eve.json but it reads only fast.log<BR /> How to add into it eve.json?</P> Thu, 19 Apr 2018 06:10:47 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-with-suricatanot-reading-eve-json/m-p/349770#M94868 Dennisherner 2018-04-19T06:10:47Z https://community.splunk.com/t5/Getting-Data-In/Splunk-with-suricatanot-reading-eve-json/m-p/349771#M94869 <P>Can you share inputs.conf you are using?</P> Fri, 20 Apr 2018 04:19:06 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-with-suricatanot-reading-eve-json/m-p/349771#M94869 p_gurav 2018-04-20T04:19:06Z