Solved: Re: OSSEC App and the Common Information Model - Splunk Community

Splunk Enterprise Security

I am a fan on the OSSEC app, however to make proper use of it in my eyes it needs to be integrated with the Common Information Model.

Has anybody already integrated the OSSEC appp with Common Information Model i.e. field extractions and tags etc.

Thanks

1 Solution

Solution

There's a TA for it in Enterprise Security -- getting that onto Apps is on the to-do list. Note that this is a long list and timing is TBD.

View solution in original post

Solution

There's a TA for it in Enterprise Security -- getting that onto Apps is on the to-do list. Note that this is a long list and timing is TBD.

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...