topic Re: Collecting Stormshield logs in Splunk Search

Collecting Stormshield logs

BRFZ — Mon, 26 Aug 2024 08:32:08 GMT

Hello,

I need to collect logs from a firewall Stormshield. Do you have any suggestions on how to gather these logs, or is there a specific add-on available for this purpose? Thank you in advance.

Re: Collecting Stormshield logs

gcusello — Mon, 26 Aug 2024 08:37:49 GMT

Hi @BRFZ ,

you can use the Stormshield_TA (https://splunkbase.splunk.com/app/3069).

ciao.

Giuseppe

Re: Collecting Stormshield logs

BRFZ — Mon, 26 Aug 2024 08:45:41 GMT

Hello,

I've noticed that the application is marked as archived and unsupported. When I try to download it from your link, I receive the following message: "Archived apps are unsupported. These apps were removed from Splunkbase or archived by the developer. Splunk does not provide support for these apps."

Re: Collecting Stormshield logs

gcusello — Mon, 26 Aug 2024 09:57:29 GMT

Hi @BRFZ ,

you have only one solution, use it and maintain by yourself.

Otherwise you should create your own custom add-on that's the same thing!

Ciao.

Giuseppe