Security

Is it possible for Splunk to read from a firewall using just the command line interface?

mahmudomer
Engager

Using Ubuntu, Is it possible for Splunk to read from a firewall that's setup and output results in real time or in a log without using any splunk apps and just using command line?
If it is possible any direction on how I could go about it?

Thanks.

0 Karma

vasanthmss
Motivator

Hi Mahmudomer,

You can monitor any local / Remote directory from command line by running command with required parameter.
Local,

 ./splunk add monitor <log path>

In-Case the files are in remote then you can use TCP/UDP. Read Splunk documentation Link

Mount filesystem / soft link may help you .

V
0 Karma
Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...