All Apps and Add-ons

App for firewall traffic analysis

tsix
Engager

We like to consolidate logs of different firewall vendors with Splunk. Is there an app that allows searching for several fields (source, dest, port, proto, etc.), presents the results and implements drill down searches on theses results?

Thanks for your help.

0 Karma

tiagofbmm
Influencer

Hello

Yes it does exist, it is called Splunk Enterprise Security!

https://splunkbase.splunk.com/app/263/

0 Karma

tsix
Engager

Thanks for recommending ES. But we like to have something more targeted towards firewall operation. We are about to write a couple of dashboards that allow searching firewall traffic logs for blocked connections and analyze rule usage and such. I assume we are not the first having such a use case.

0 Karma

tiagofbmm
Influencer

If you are about to write the dashboard yourself, I would suggest you to take a look at the one of the DataModels in ES ann do it for your own use case.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...