Security

Mikrotik APP and ES

ashkanarjmand
New Member

Hi

for getting mikrotik logs in splunk i use mikrotik app.
i have a problem with show mikrotik events in splunk Enterprise Security (ES), nothing show. i have around 10M logs in splunk but all of my notables in ES are empty!
what can i do ?

 

in the first picture: 192.168.110.1 is my mikrotik routerboard: 

in the second picture: as you see i have too many DNS activity: 

and i the third picture:  in ES APP nothing show:

 

i this picture: 192.168.110.1 is my mikrotik routerboard:i this picture: 192.168.110.1 is my mikrotik routerboard:as you see i have too many DNS activity:as you see i have too many DNS activity:but i ES nothing show:but i ES nothing show:

Labels (1)
Tags (2)
0 Karma

zandhaas
Explorer

Look at the corresponding thread on the Mikrotik forum:

https://forum.mikrotik.com/viewtopic.php?t=179960 

0 Karma

ashkanarjmand
New Member

no one answer me?

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...