Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Akamai WAF integration with Splunk
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Akamai WAF integration with Splunk
I have installed akamai add on for splunk in our HF.
https://splunkbase.splunk.com/app/4310
I followed the documentation but after installing the add on not seeing any option to add api input.
It shows only dashboard. Not seeing any option called “ Akamai Security Incident Event Manager API” under data inputs. So, not able to ingest data.
Can anyone help here please.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@shivanshu1593 @jitbahan @Gowhar @dsainz please help me on the similar issue - https://community.splunk.com/t5/Getting-Data-In/Akamai-add-on-logs-are-not-populating/m-p/743241#M11...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
facing the same issue now. can anyone help me? We have Splunk instances on AWS cloud. How to install Java on those instances?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Instead of looking in the app, please try clicking on Settings -> then click on Data Inputs and then look for Akamai Security Incident Event Manager API. Once you locate it, click on it and follow the instructions mentioned on this page:
https://techdocs.akamai.com/siem-integration/docs/siem-splunk-connector#install-the-splunk-connector
Shiv
###If you found the answer helpful, kindly consider upvoting/accepting it as the answer as it helps other Splunkers find the solutions to similar issues###
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
I tried with the option. But no luck.
Not seeing any option called "Akamai Security Incident Event Manager API" under data inputs of settings.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
You need to install Java JRE 1.8+ before installing Akamai Splunk Connector. For example, use "yum install java-1.8.0-openjdk" if your HF is based on Linux CentOS.
Regards.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
can anyone help please.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was also facing the same issue. You need to instal the Java and then restart splunk you would be able to see it.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest
Splunk Developers: Construct Your Future at the .conf26 Builder Bar
Quick connection discovery mode for forwarders
