Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Akamai WAF integration with Splunk
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Akamai WAF integration with Splunk
I have installed akamai add on for splunk in our HF.
https://splunkbase.splunk.com/app/4310
I followed the documentation but after installing the add on not seeing any option to add api input.
It shows only dashboard. Not seeing any option called “ Akamai Security Incident Event Manager API” under data inputs. So, not able to ingest data.
Can anyone help here please.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@shivanshu1593 @jitbahan @Gowhar @dsainz please help me on the similar issue - https://community.splunk.com/t5/Getting-Data-In/Akamai-add-on-logs-are-not-populating/m-p/743241#M11...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
facing the same issue now. can anyone help me? We have Splunk instances on AWS cloud. How to install Java on those instances?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Instead of looking in the app, please try clicking on Settings -> then click on Data Inputs and then look for Akamai Security Incident Event Manager API. Once you locate it, click on it and follow the instructions mentioned on this page:
https://techdocs.akamai.com/siem-integration/docs/siem-splunk-connector#install-the-splunk-connector
Shiv
###If you found the answer helpful, kindly consider upvoting/accepting it as the answer as it helps other Splunkers find the solutions to similar issues###
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
I tried with the option. But no luck.
Not seeing any option called "Akamai Security Incident Event Manager API" under data inputs of settings.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
You need to install Java JRE 1.8+ before installing Akamai Splunk Connector. For example, use "yum install java-1.8.0-openjdk" if your HF is based on Linux CentOS.
Regards.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
can anyone help please.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was also facing the same issue. You need to instal the Java and then restart splunk you would be able to see it.
Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...
Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...
Reduce and Transform Your Firewall Data with Splunk Data Management
