Archive

cisco_ironport_web.log sample data needed

New Member

I am building an index and would like to get some sample data, specifically Cisco Ironport Web data that contains a user, URL and domain fields.

Tags (1)
0 Karma

Splunk Employee
Splunk Employee

Hi pbugeja!

PRO TIP! : Splunk built TAs usually contain a sample directory! Gives you an idea what we used to build the TAs!

Check out the Cisco WSA TA, it has a few goodies in there! Hopefully one fits your needs!

https://splunkbase.splunk.com/app/1747/

alt text

0 Karma

New Member

Hi Asimagu,

I appreciate your reply, but I had reviewed the logs on the OSSEC site and was not able to find the appropriate log that contained the fields needed.
/Paul

0 Karma

Builder
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!