Security & the Enterprise
Much secured. So patch!

Monitor Ports of Universal Forwarders

ch93
New Member

Hi everyone,

Is there any way that I can configure my Universal Forwarders to monitor their respective open ports, and then forward any information about the ports' network traffic to the receiver? I'm using Splunk Enterprise and haven't found any apps yet that do what I'm looking for.

I've also edited the outputs.conf file so that the forwarders are sending their security logs to the receiver, but I was hoping to get a more granular look at the port activity. 

Thank you in advance for your help!

 

 

 

 

 

0 Karma

youngsuh
Path Finder

Try the nmap add-on from Splunk base.  Good luck.

0 Karma