Splunk Search

How to pull data into Splunk from Simple Event Correlator (SEC)?

daniel333
Builder

All,

We need to pull data from a platform called "SEC", Simple Event Correlator into Splunk. Any one familiar with this? Have any apps or experience in this matter they can share?

thanks
-Daniel

Tags (1)
0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

SEC can produce output by executing external programs (e.g., snmptrap(1) or mail(1)), by writing to files, by sending data to TCP and UDP based servers, by calling precompiled Perl subroutines, etc. You should be able to output and send data over syslog via TCP or UDP into Splunk.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...