January 13, 2017
FireEye Add-on for Splunk Enterprise
FireEye TA to support the FireEye_v3 app found here: https://apps.splunk.com/app/1845/Built by FireEye SplunkSplunk Enterprise
CIM Version: 4.x, 3.x
Log in to rate this app
FireEye TA to support the FireEye_v3 app found here: https://apps.splunk.com/app/1845/ App walk-through video: http://youtu.be/-KBN1Xvqe6U Supported FireEye Appliances are: - Network Threat Prevention Platform ( NX Series ) - Email Threat Prevention Platform (EX Series) - Forensic Analysis Platform (AX Series) - Content Threat Prevention Platform (FX Series) - Endpoint Threat Prevention Platform (HX Series) - Network Forensics Platform (PX Series) - Threat Analytics Platform (TAP) Supported protocols and formats are: 1) JSON over HTTPS 2) XML over HTTPS 3) CEF over SYSLOG - TCP 4) CEF over SYSLOG - UDP 5) XML over SYSLOG - TCP 6) XML over SYSLOG - UDP 7) JSON over SYSLOG - TCP 8) JSON over SYSLOG - UDP 9) CSV over SYSLOG - TCP 10) CSV over SYSLOG - UDP
Log in to report this app listing.