We like to consolidate logs of different firewall vendors with Splunk. Is there an app that allows searching for several fields (source, dest, port, proto, etc.), presents the results and implements drill down searches on theses results?
Thanks for your help.
Thanks for recommending ES. But we like to have something more targeted towards firewall operation. We are about to write a couple of dashboards that allow searching firewall traffic logs for blocked connections and analyze rule usage and such. I assume we are not the first having such a use case.