How to integrate Symantec Control Compliance Suite with Splunk ? Has anyone done this before and how.
You can indexed logs generated by Symantec Control Compliance Suite in Splunk suing file monitoring.
http://docs.splunk.com/Documentation/Splunk/7.2.0/Data/Monitorfilesanddirectories
Okay. What would be the log format like - syslog or something else ?
I want to understand what sourcetype we would define to these logs.