Deployment Architecture

Which version of Splunk Forwarder works with Security Onion 64 bit?


I am trying to find a version of the Linux Splunk forwarder that works with Security Onion - previously in the past Security Onion was a bit fussy with what distro could be used, and since it's been updated in Oct 18, (now using a 64 bit Ubuntu release underneath) 4.15.0-48-generic kernel - I can't get a version of the forwarder to work - if anyone has had any success with the newer Sec Onion, please could you let me know. Ta.

0 Karma

Super Champion

Hi, do you want to install a forwarder on Security Onion server and then send the logs to another Splunk indexer?
may we know if you have checked this app "Security Onion App for Splunk software"

maybe check this blog:

0 Karma