Getting Data In

How to integrate BeyondTrust Retina to Splunk and find log source?

New Member

I am planning to integrate BeyondTrust Retina to Splunk and would like to know the process. Currently, the logs are coming coming to Splunk via primary server and not with the Retina DB. I have seen there is a Splunk document for integration of scanner logs directly to Splunk but here we have multiple scanners. The reason for this change is we are not receiving all fields in splunk for retina logs. I would like to know

1 the process of integrating Retina DB with Splunk server that will help in getting all the log fields.
2 How can we segregate the log fields to the ones I require within event logs during generation??


0 Karma

New Member

I have the same exact question as tactualapplein above.

0 Karma

Path Finder

Anybody have any update on this?

0 Karma
Get Updates on the Splunk Community!

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...