Archive

Splunk indexer for sonicwall firewall logs.

captainjak
New Member

Hi all, in our network environment to capture the logs and analyze that logs generated by SonicWall firewall we have implemented Splunk enterprise tool in Linux server. Our Splunk indexer is displaying the local linux server logs but not the firewall logs coming to server from sonicwall via syslog server. We're missing a single step away from indexing the logs. need support.

0 Karma

asmetanin
New Member

Settings > Access Controls > Roles > admin option : Indexes searched by default"
select and make it default
In the Search window type 'index=*', should see the events

0 Karma