Splunk Enterprise Security

Is there a Technology Add-on for Sophos UTM/Firewall SG 430 that is CIM compliant to use with Splunk Enterprise Security?

hamzeh_khosravi
New Member

I have a some problem with “Sophos UTM/Firewall SG 430” because I searched in splunkbase.splunk.com to find the TA for that, but Splunk does not provide Technology Add-ons for this that are CIM-compatible to use with the Splunk Enterprise Security application.

Can anyone help me?

0 Karma
1 Solution

LukeMurphey
Champion

You might want to try looking the Add-on Builder (https://splunkbase.splunk.com/app/2962/ ). This allows you to create an add-on with an easy to use interface.

View solution in original post

LukeMurphey
Champion

You might want to try looking the Add-on Builder (https://splunkbase.splunk.com/app/2962/ ). This allows you to create an add-on with an easy to use interface.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...