Sophos Anti-Virus for Linux with Splunk - Splunk Community

Getting Data In

Has anybody installed Sophos Anti-Virus for Linux on the same machines as their Splunk Head and Splunk Indexer? If so, what are the gotchas?

Splunk recommends configuring your AV scanners to not scan $SPLUNK_HOME. See https://docs.splunk.com/Documentation/Splunk/8.0.6/ReleaseNotes/RunningSplunkalongsideWindowsantivir...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them. As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...