All Apps and Add-ons

SNMPV3 Support

mdoering
New Member

Would you be able to add SNMPv3 support? The current RSA Authentication Manager Virtual Appliance (8.1) only supports SNMPv3

0 Karma

dolejh76
Communicator

Trying get our new appliances logging in splunk and would like to use this app - any progress on snmpv3 support?

0 Karma

joshd
Builder

Finally got access to the logs from a new RSA appliance and in the process of updating the app however I doubt SNMPv3 will be part of the update since I do not have access to walk the device, however if you are willing to assist with supporting that integration (some simple testing) then email me at the address posted in one of my answers within this thread and I'd be glad to work on that.

0 Karma

careybrucem
Explorer

We went with the Syslog option.

0 Karma

d3
Explorer

The new 8.1 RSA appliance supports syslog as well as SNMP. Authentication logging will be sent to the syslog server as well as stored locally. The app can likely be used for Splunk to properly parse/transform the data since it is only CSV formatted and does not use name=value pairing.,The new 8.1 RSA appliance supports syslog as well as SNMP. The server will send syslog as well as write to local disk.

0 Karma

careybrucem
Explorer

d3, new to Splunk. Can you be more specific in setting up Splunk to receive from RSA appliance? UDP vs. TCP, sourcetype, etc.? Thanks

0 Karma

joshd
Builder

@mdoering ... send me an email joshd blank joshd space ca ...and we can discuss what you need.

replace blank with a @ and space with a . 🙂

ppablo
Retired

@joshd thumbs up

0 Karma

stinnett
New Member

Also curious about this as well. Any plans to add this support?

Thanks,

Jon

0 Karma

joshd
Builder

This app is due for a much needed overhaul as a whole... altho I lack access to the devices anymore to do testing. Are you able to provide some assistance with sample data and such? If so, please email me at the email address above and I can get moving on things. Thanks!

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...