Archive
Highlighted

,Eventgen.conf file for different splunk-apps

Engager

Hello everyone,

Do we have to create a eventgen.conf file for all apps. Or, does it automatically come under the relevant apps when the apps are installed? For example, i've installed SplunkAppForFortinet with add-on and ciscoios apps with add-on. There is a eventgen.conf file in the TA-ciscoios/default but there is no eventgen.conf in the splunkTAfortinet_fortigate.

Could you please help me to find what is the problem?

Re: ,Eventgen.conf file for different splunk-apps

SplunkTrust
SplunkTrust

Not all apps include eventgen configs. For those that lack it, it is up to you to create it.

---
If this reply helps you, an upvote would be appreciated.
0 Karma