Splunk Search

log4j Macros

genesiusj
Builder

Hello,

This article, https://research.splunk.com/stories/log4shell_cve-2021-44228/ , lists many log4j attack vectors and how Splunk can help detect them. This includes what datamodels to implement/use and the SPL. However, the SPL includes various macros. And these macros do not exist on my Splunk implementation. Where do I find these macros?

Thanks and God bless,
Genesius

Labels (1)
Tags (1)
0 Karma

aasabatini
Motivator

Hi @genesiusj 

 

do you have installed Enterprise security on your splunk istance?

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma

genesiusj
Builder

@aasabatini 

No, we don't have ES installed.

Thanks and God bless,
Genesius

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...