Splunk with suricatanot reading eve.json

Getting Data In

I have checked suricata TA app for reading intrusion but as I see it doesn't read eve.json but it reads only fast.log
How to add into it eve.json?

Can you share inputs.conf you are using?

Get Updates on the Splunk Community!

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

Are you a member of the Splunk Community?