×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
collins
New Member
Member since: ‎10-01-2013
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-01-2013
Activity Feed
View All

Re: FireEye App and Splunk version 6

by in All Apps and Add-ons
‎11-25-2013 10:44 AM
‎11-25-2013 10:44 AM
Hi rgaleone1 Thanks for answring my question. My FireEye is sending alerts to my splunk server using the xml extended format per the rel 5 install instructions. the data looks like this. 11/19/13 7:26:49.000 PM \x80g\x00N\x00\x00\x00\x00\x009\x00\x008\x00\x005\x00\x00\x00\x00\x00\x00 \x00\xC0\x00\x003\x00\x002\x00\x00/\x00\x80\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00 \x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x80\x00\x00\xFF3\x8D\xCF|s\xFF1\xB6\x8FF\x94\xEF Did you have to change the FireEye app to get it to work with rlease 6 of splunk ... View more

FireEye App and Splunk version 6

by in All Apps and Add-ons
‎11-19-2013 07:43 PM
‎11-19-2013 07:43 PM
Will the splunk FireEye app run on the Splunk version 6? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM