Juniper os syslogs are not parsing and breaking t... - Splunk Community

Splunk Cloud Platform

we are using splunk cloud and getting juniper OS logs as syslogs from Heavy forwarder to splunk cloud.

but in splunk cloud fields are not breaking

we have installed in juniper addon in splunk cloud

do this need should there at Heavy forwarder end so that parsing will happen

Line breaking and some field extraction is performed by the heavy forwarder so the add-on must be installed there as well.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...