Splunk Search

Best way to simulating or obtain an commonly data source into Splunk Enterprise for POCs.

thanh_on
Explorer

Hi All,

I don't have many resource to build an ideal network environment to forward logs to Splunk. So, I'm seeking a way to simulating or source to obtain many commonly data sources into Splunk (Like some SIEM solutions have scripts to forward syslog through port 514). Any answer will be highly appreciated.

Regard.

 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @thanh_on,

have you access to Splunk Show (https://show.splunk.com/login/?redirect=/)?

here you can find a complete environment to test Enterprise Security with a relevant set of data.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @thanh_on,

have you access to Splunk Show (https://show.splunk.com/login/?redirect=/)?

here you can find a complete environment to test Enterprise Security with a relevant set of data.

Ciao.

Giuseppe

isoutamo
SplunkTrust
SplunkTrust
show.splunk.com is mainly targeted to Splunk partners which have fulfilled some additional requirements. It's not for customers (without help from those partners e.g. in sales case).
0 Karma

thanh_on
Explorer

Thank you for your information. Actually, my company is an Splunk Partner so I can login to demo sites. Moreover, I'm still seeking for a RAW commonly data source for customize and fully control to my own Splunk.

Regard.

0 Karma

isoutamo
SplunkTrust
SplunkTrust
0 Karma

thanh_on
Explorer

Thank you Giuseppe, I have found static Splunk enterprise security demo site. I appreciate your help. 

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...