Splunk Cloud Platform

FireEye Add-on and Application with Splunk

umairrr09
New Member

Dear Community,

I integrate the FireEye NX with Splunk, but logs are not parsing as expected. I was searching for relevant add-ons and application for FireEye. I found below add-on and app,

https://splunkbase.splunk.com/app/1904 (fireeye add on)

https://splunkbase.splunk.com/app/1845 (fireeye App).

While i was going through the documentation of these add-on and app, i found it only support Splunk Enterprise platform not Cloud. 

Is there any other application or add-on of same functionality on Splunk Cloud?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

As far as I remember, the addon isn't that great and has some problems with itself, especially with CEF events. Probably most reliable way of getting the data would be to send the jsons to HEC endpoint. Then you could extract CIM mappings from the app and wrap them into your own app.

0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...