All Apps and Add-ons

Splunk Add-on for Apache vs pretrained sourcetypes

satyenshah
Path Finder

Is the Apache Add-on falling out of favor?

  1. It hasn't been updated since 1.0.0 release
  2. It doesn't officially support 7.3 or 8.0 (though unofficially it works fine)
  3. Splunk can natively parse apache logs using the access_combined and apache_error pretrained sourcetypes
  4. If you need more thorough CIM mapping than the pretrained sourcetypes offer, then there's an unofficial 'Add-on for Access Combined' available on splunkbase that does the job with fewer field extractions than the Apache add-on, and without the need for another sourcetype
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...