Splunk Add-on for Juniper
Splunk Built
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The Splunk Add-on for Juniper allows a Splunk software administrator to pull system logs and traffic statistics from Juniper NetScreen Firewall and Junos OS using syslog. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.
Documentation for this add-on is posted at Splunk Docs
Release Notes
Version 1.5.5rfb1b492
Dec. 15, 2020
Added Add-On support for EX4200 switches and MX80 routers.
The following SNMP tags are supported under a new sourcetype sourcetype=juniper:junos:snmp:
SNMP_TRAP_LINK_UP
SNMP_TRAP_LINK_DOWN
New eventtype added: juniper_junos_change_network
Support for CIM 4.18
Added support for the following messages under the juniper:junos:firewall sourcetype:
PFE_FW_SYSLOG_ETH_IP
SNMP_TRAP_LINK_UP
SNMP_TRAP_LINK_DOWN
ESWD_STP_STATE_CHANGE_INFO
ESWD_DAI_FAILED
EVENT <UpDown>
Version 1.0.0
Aug. 20, 2015
Splunk Add-on for Juniper 1.0.0. Copyright (C) 2005-2015 Splunk Inc. All rights reserved.