,Eventgen.conf file for different splunk-apps


Hello everyone,

Do we have to create a eventgen.conf file for all apps. Or, does it automatically come under the relevant apps when the apps are installed? For example, i've installed SplunkAppForFortinet with add-on and ciscoios apps with add-on. There is a eventgen.conf file in the TA-ciscoios/default but there is no eventgen.conf in the splunkTAfortinet_fortigate.

Could you please help me to find what is the problem?


Re: ,Eventgen.conf file for different splunk-apps


Not all apps include eventgen configs. For those that lack it, it is up to you to create it.

If this reply helps you, an upvote would be appreciated.
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.