Splunk Enterprise Security

Is there a Technology Add-on for Sophos UTM/Firewall SG 430 that is CIM compliant to use with Splunk Enterprise Security?

hamzeh_khosravi
New Member

I have a some problem with “Sophos UTM/Firewall SG 430” because I searched in splunkbase.splunk.com to find the TA for that, but Splunk does not provide Technology Add-ons for this that are CIM-compatible to use with the Splunk Enterprise Security application.

Can anyone help me?

0 Karma
1 Solution

LukeMurphey
Champion

You might want to try looking the Add-on Builder (https://splunkbase.splunk.com/app/2962/ ). This allows you to create an add-on with an easy to use interface.

View solution in original post

LukeMurphey
Champion

You might want to try looking the Add-on Builder (https://splunkbase.splunk.com/app/2962/ ). This allows you to create an add-on with an easy to use interface.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...