All Apps and Add-ons

How to setup Cisco eStreamer for Splunk on a Windows server to run correctly?

New Member

As we have Splunk running on a Windows server, could you suggest how your eStreamer app is setup to run correctly on a Windows server.
https://apps.splunk.com/app/1629/

I note it is adapted for Linux and I have attempted to integrate it on Windows but cannot find the perl module NetAddr::IP after installing the rest below and creating a certificate for Splunk.

Getopt::Long
Socket
IO::Socket::SSL
NetAddr::IP not installed
Storable

Can you suggest how to integrate this or an alternative to get Splunk to receive estreamer events?

0 Karma
1 Solution

Path Finder

Hello,

Unfortunately at this point this is a Unix-only app. There is no Windows support, and it will NOT run on Windows without a LOT of modification. Sorry.

  • Colin

View solution in original post

0 Karma

Path Finder

Hello,

Unfortunately at this point this is a Unix-only app. There is no Windows support, and it will NOT run on Windows without a LOT of modification. Sorry.

  • Colin

View solution in original post

0 Karma

New Member

Would you be able to provide information related to the modification. Will you have to modify components for the Search Head, Indexer, or both?

What level of skill would be needed to make these modifications?

0 Karma

New Member

Thanks for the response Colin.

Is there an alternative for integrating Sourcefire into Splunk on Windows?

0 Karma