Collecting Stormshield logs

[BRFZ]

Hello,

I need to collect logs from a firewall Stormshield. Do you have any suggestions on how to gather these logs, or is there a specific add-on available for this purpose? Thank you in advance.

[gcusello]

Hi @BRFZ ,

you can use the Stormshield_TA (https://splunkbase.splunk.com/app/3069).

ciao.

Giuseppe

[BRFZ]

Hello,

I've noticed that the application is marked as archived and unsupported. When I try to download it from your link, I receive the following message: "Archived apps are unsupported. These apps were removed from Splunkbase or archived by the developer. Splunk does not provide support for these apps."

[gcusello]

Hi @BRFZ ,

you have only one solution, use it and maintain by yourself.

Otherwise you should create your own custom add-on that's the same thing!

Ciao.

Giuseppe