Are there currently any apps to parse and index VMware NSX logs?

[trross33]

Are there currently any apps geared to ingesting VMware NSX logs? A few videos, and documents online seem to indicate this is possible, and that Splunk can ingest and parse NSX logs, however I cannot find any details on how this is accomplished. I am currently receiving nsx logs via rsyslog, and dumping to a file for Splunk ingestion. Would anyone be able to point me in the correct direction?

[nyc_jason]

This blog may help: http://blogs.vmware.com/networkvirtualization/2016/01/vmware-nsx-security-splunk.html

[trross33]

Are there any suggestions that could point me in the right direction? Thanks.

[o_calmels]

Hi Trross33, I going to make a POC with NSX, because I'm very hapy with Splunk, I Wonder if you found any clue ?

Thank's !

[nyc_jason]

This blog may help http://blogs.vmware.com/networkvirtualization/2016/01/vmware-nsx-security-splunk.html