AlienVault Ossim App by A3SEC
i just install the app and follow the document but i didnt get the dashboard same as alien vault to splunk
what can i do?
seems like a legacy app, if you look at the notes, it says you need Sideview Utils for the app, which makes me guess it uses Advanced XML which was depreciated probably 2 or 3 years ago ...
if the data is fine, and you can see it and work with it, i suggest that you will build your own dashboards.
you can always look at the source code of the views / dashboards and see what searches are running underneath
good luck
Yes thank you for your response ,I am not expecting this answer, ok I just copy the alien valut syslog file and upload my file in splunk server and overwrite the ossim_internal source type these are all done means i am getting the a3sec app dashboard