Skip to main content
TA for open-appsec WAF and NGINX Proxy Manager app icon

TA for open-appsec WAF and NGINX Proxy Manager

Parses and CIM-normalizes open-appsec WAF events (Intrusion Detection) and NGINX Proxy Manager access logs (Web) for Splunk Enterprise and Enterprise Security.Built by Cyberfox DEVELOPER
splunk product badge
Default Version 1.1.1

October 20, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.6, 10.5, 10.4, 10.3, 10.2, 10.1, 10.0

CIM Version: 8.x, 6.x

Rating
5
(1)

Log in to rate this app

Support
Developer Supported

Free add-on for Splunk Enterprise and Enterprise Security that parses and CIM-normalizes logs from open-appsec WAF and NGINX Proxy Manager (NPM). open-appsec security events (detected and prevented attacks) are mapped to the Intrusion Detection data model. NPM access logs are mapped to the Web data model. NPM error logs are parsed. Use it to investigate web application attacks, monitor WAF blocking activity, and analyze HTTP traffic through NPM. It also correlates WAF events with NPM proxy hosts. Contains configuration files only: no UI, no scripts, no external dependencies.