Archive

Splunk indexer for sonicwall firewall logs.

New Member

Hi all, in our network environment to capture the logs and analyze that logs generated by SonicWall firewall we have implemented Splunk enterprise tool in Linux server. Our Splunk indexer is displaying the local linux server logs but not the firewall logs coming to server from sonicwall via syslog server. We're missing a single step away from indexing the logs. need support.

0 Karma

New Member

Settings > Access Controls > Roles > admin option : Indexes searched by default"
select and make it default
In the Search window type 'index=*', should see the events

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!