Can you provide tutorial to install it pfsense.
1. currently the splunk enterprise is installed on my mac
2. need to know how to install splunk forwarder to the latest pfsense, need step by step for noob.
The docs here give instructions for installing a forwarder. Additional tips for pfsense are at https://answers.splunk.com/answers/120717/pfsense-splunk-universal-forwarder.html
The docs here give instructions for installing a forwarder. Additional tips for pfsense are at https://answers.splunk.com/answers/120717/pfsense-splunk-universal-forwarder.html
Thanks, appreciated it.. Have installed it now and able to capture the logs from my pfsense, do you know how to do the search for squid access log, need to filter only the source ip/time/and the website.
Please submit a new question.