The TA for Symantec Endpoint Protection (syslog) allows a Splunk platform administrator to collect SEP server syslog messages. After the Splunk platform indexes the events, you can consume the data using the prebuilt dashboard panels included with the add-on. This add-on provides CIM-compatible knowledge to use with Splunk Enterprise apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. This TA is not supported by either Splunk or Symantec and is created as a 3rd party best effort.