Security

Mikrotik APP and ES

ashkanarjmand
New Member

Hi

for getting mikrotik logs in splunk i use mikrotik app.
i have a problem with show mikrotik events in splunk Enterprise Security (ES), nothing show. i have around 10M logs in splunk but all of my notables in ES are empty!
what can i do ?

 

in the first picture: 192.168.110.1 is my mikrotik routerboard: 

in the second picture: as you see i have too many DNS activity: 

and i the third picture:  in ES APP nothing show:

 

i this picture: 192.168.110.1 is my mikrotik routerboard:i this picture: 192.168.110.1 is my mikrotik routerboard:as you see i have too many DNS activity:as you see i have too many DNS activity:but i ES nothing show:but i ES nothing show:

Labels (1)
Tags (2)
0 Karma

zandhaas
Explorer

Look at the corresponding thread on the Mikrotik forum:

https://forum.mikrotik.com/viewtopic.php?t=179960 

0 Karma

ashkanarjmand
New Member

no one answer me?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...