Splunking OpenVPN Server Logs

[sajbutler]

Hi All

I've started ingest OpenVPN server logs. I've done a preliminary search on apps, answers and the Net at large and cannot find anything (field extractions, log structure). Has anyone had any experience in splunking/extracting openVPN logs that they would care to share with me?

[bradp1234]

Take a look at the TA-pfsense app. It has the extractions for openvpn logs.

https://apps.splunk.com/app/1527/

[meoo]

It doesn't work quiet well however. I tried and the extractions do not happen as expected.

[bradp1234]

You may have to modify the app to work for your use case.

[krisrmal]

@bradp1234 , @meoo @sajbutler 

Did anyone managed to get OpenVPN logs to Splunk? If so, can anyone help on this?

[mhersaratikyan]

Try to send them via syslog

[to4kawa]

@krisrmal 

https://www.trenchesofit.com/2019/12/11/building-a-splunk-dashboard-for-openvpn/