Splunk Enterprise Security

how to integrate with splunk and alienvault ?

zippyopsadmin
New Member

AlienVault Ossim App by A3SEC
i just install the app and follow the document but i didnt get the dashboard same as alien vault to splunk
what can i do?

0 Karma

adonio
Ultra Champion

seems like a legacy app, if you look at the notes, it says you need Sideview Utils for the app, which makes me guess it uses Advanced XML which was depreciated probably 2 or 3 years ago ...
if the data is fine, and you can see it and work with it, i suggest that you will build your own dashboards.
you can always look at the source code of the views / dashboards and see what searches are running underneath

good luck

0 Karma

zippyopsadmin
New Member

Yes thank you for your response ,I am not expecting this answer, ok I just copy the alien valut syslog file and upload my file in splunk server and overwrite the ossim_internal source type these are all done means i am getting the a3sec app dashboard

0 Karma
Get Updates on the Splunk Community!

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...

Introducing New Splunkbase Governance!

Splunk apps are essential for maximizing the value of your Splunk Experience. Whether you’re using the default ...

3 Ways to Make OpenTelemetry Even Better

My role as an Observability Specialist at Splunk provides me with the opportunity to work with customers of ...