This Technology Add-on provides CIM-compliant field extractions, eventtypes, and tags for the OPNsense Firewall. Check out the OPNsense App for Splunk for visualizations (https://splunkbase.splunk.com/app/5372/).
See complete documentation at https://splunk-opnsense-ta.ztsplunker.com/