Getting Data In

Can the Splunk Add-on for Juniper extract SRX logs?

esalmon
Explorer

Hi, I'm bring SRX data into Splunk but the fields aren't getting extracted by the Juniper Add-On.

Can the Juniper Add-On parse SRX logs? And if so, what could be the issue? The logs are coming in, but its not searchable since there's no field extractions.

Labels (1)
0 Karma

jmantor
Path Finder

I'd like some clarification on this as well.  Does the TA select the correct source type for these events?

0 Karma

shaahin
Explorer

i have the same issue. i dont know what sourcetype should be set in input file. srx forwarding logs via syslog on UDP:514.

any help?

0 Karma
Get Updates on the Splunk Community!

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...