Hello all,
I'm trying to integrate Barracuda NG Firewall 7.2 with Splunk 7.3.1, I don't see any data syslogging to my Splunk instance.
This is the only information I see after set all like they say here:
Splunk Integration
PARSER: Applying intentions failed Comparator '=' has an invalid term on the left hand side: host=sourcetype
I suppose "PARSER' error isn't even related with my problem at all.
Here they say Splunk 7.x should work with Barracuda NG Firewall
I have sent barracudas' configuration file to Barracuda support, and they say all configuration are set up correctly, so this problem is on the side Splunk instance I suppose.