Security

Monitor TCP port 80 in a PC (HOME)

a1697115
New Member

I am new to Splunk and I am going to create data input of monitoring TCP packet to/from my laptop

I have already installed Splunk enterprise and followed the instruction for monitoring the TCP port. I could create monitor data input but when I search nothing is captured?

I have already generated this data in snort and now want to do the same thing in Splunk but it fails?

Shall I need to install something further? or need to do a special configuration.

I really lost in lots of documentation in Splunk and not sure how to solve this simple problem

I appreciated any help

Regards,

Zeynab

Labels (1)
0 Karma

aasabatini
Motivator

Hi @a1697115 

i understand you need to monitor  the traffic packets  on your  port 80 right?

in that case you need to configure this app, splunk app for stream

https://splunkbase.splunk.com/app/1809/

The Splunk App for Stream with the Add-on for Stream Forwarder and Add-on for Stream Wire Data actively or passively capture packets, dynamically detect applications, parse protocols, and send metadata back to your Splunk environment for over 30 protocols and 300 commercial applications.

if this help confirmation solution or karma point is appreciated

Alessandro

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...