Hello from the future. I have time traveled back to 2018 to see if there are still any plans to port this to Windows. Not my choice, I am in a Windows only shop.
... View more
I wish I would have seen this earlier. We've been having performance issues with our system for months and they finally alleviated themselves once we disabled the this app from Splunk among other things. Considering the poor results I'm getting from trying to rely on Syslog, I may end up re-implementing this iApp.
... View more
Yes, we ended up disabling HEC entirely from F5 and moving to Syslog. But the pre-baked queries on the old F5 apps are all kind of malformed and out of date. We're currently depending on viewing daily logs directly from the F5 to keep an eye on VPN users.
... View more