All Apps and Add-ons

Hurricane Labs Add-On for Unified2 compatibility?

mnmblair
Explorer

Is this app compatible with the latest version of Splunk and Splunk UF? Is this intended to replace the need for barnyard2?

1 Solution

mcmaster
Path Finder

Hey there -

We're not officially supporting the Unified2 TA, as we've moved on from it and use Suricata now. That said, it should still work in the latest UF, as it relies on the system Python rather than Splunk's built-in Python. It was indeed intended to replace barnyard2.

If you try it with the newest UF and it doesn't work, we can provide some best effort help if you need it.

View solution in original post

0 Karma

mnmblair
Explorer

Hi mcmaster,
Does this parse Unified2 event_types, i.e. mpls_ID, vlan_ID, app_ID? Will it work with Python3?

0 Karma

mcmaster
Path Finder

Hey there -

We're not officially supporting the Unified2 TA, as we've moved on from it and use Suricata now. That said, it should still work in the latest UF, as it relies on the system Python rather than Splunk's built-in Python. It was indeed intended to replace barnyard2.

If you try it with the newest UF and it doesn't work, we can provide some best effort help if you need it.

View solution in original post

0 Karma

mnmblair
Explorer

Hi mcmaster,
Will this work with Python3? Does it parse unified2 event_types, i.e. mpls, vlan, appid?

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!