We are looking into upgrading the Juniper Add On application from 1.0.2 to 1.5.5 using the following link:
https://splunkbase.splunk.com/app/2847/#/details
We still are using the juniper:sslvpn which apparently has been deprecated after version 1.3. The eventtypes in version 1.0.2 reference this juniper:sslvpn sourcetype but the new 1.5.5 application does not reference juniper:sslvpn in any of its eventtypes.
Our current configuration using SC4S, however, still sends new events to juniper:sslvpn. Is there another SC4S upgrade that is necessary to send data to new juniper sourcetypes prior to upgrading to the latest 1.5.5 version of the Juniper application?
Any help would be appreciated.
Thank you.
Tom