Getting Data In

What is the proper sourcetype for Symantec Brightmail Gateway 10.X?

ssubhani
Explorer

Hi

I need help finding the Splunk sourcetype for the Symantec Brightmail Gateway 10.X. Syslog or sendmail_syslog is not working...pls share the sourcetype.

Richfez
SplunkTrust
SplunkTrust

I don't believe there is a built-in or easily obtainable Technology Add-on (TA) for SBG - I did a bit of searching before answering this question here and didn't see one.

However, it sounds like you are asking on how you would get your data into and searchable in Splunk, and only secondarily about specific TAs or Apps.

So if you don't have your data coming in yet, that should be your first task. George Starcher's blog may be a good place to start for ingesting syslog data into rsyslog or into my preference, syslog-ng. Set the email device up to send syslog in to whatever server you create for doing syslog (it can be quite modestly sized - it just needs enough disk space), and install the UF on that syslog server.

You'll then configure a monitor input on the UF on the syslog server to read the files syslog-ng/rsyslog is creating. Set your sourcetype and index in that monitor stanza - for help, see this section of the inputs.conf. Set your outputs.conf to go to your Splunk Indexer.

Additional help can be found by searching the rest of Splunk's documentation (Awesome stuff!), search Answers, or even post a new question about some specific task you are having a hard time accomplishing!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...