FireEye TA to support the FireEye_v3 app found here: https://apps.splunk.com/app/1845/
App walk-through video:
http://youtu.be/-KBN1Xvqe6U
Supported FireEye Appliances are:
- Network Threat Prevention Platform ( NX Series )
- Email Threat Prevention Platform (EX Series)
- Forensic Analysis Platform (AX Series)
- Content Threat Prevention Platform (FX Series)
- Endpoint Threat Prevention Platform (HX Series)
- Network Forensics Platform (PX Series)
- Threat Analytics Platform (TAP)
Supported protocols and formats are:
1) JSON over HTTPS
2) XML over HTTPS
3) CEF over SYSLOG - TCP
4) CEF over SYSLOG - UDP
5) XML over SYSLOG - TCP
6) XML over SYSLOG - UDP
7) JSON over SYSLOG - TCP
8) JSON over SYSLOG - UDP
9) CSV over SYSLOG - TCP
10) CSV over SYSLOG - UDP
Categories
IT Operations, Security, Fraud & Compliance
Resources
Log in to report this app listing