splunk
Splunk Add-on for Juniper
Splunk Cloud
Splunk Built
Overview
Details
The Splunk Add-on for Juniper allows a Splunk software administrator to pull system logs and traffic statistics from Juniper NetScreen Firewall and Junos OS using syslog. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.
Documentation for this add-on is posted at Splunk Docs
Release Notes
Version 1.5.5rfb1b492
Dec. 15, 2020
Added Add-On support for EX4200 switches and MX80 routers.
The following SNMP tags are supported under a new sourcetype sourcetype=juniper:junos:snmp:
SNMP_TRAP_LINK_UP
SNMP_TRAP_LINK_DOWN
New eventtype added: juniper_junos_change_network
Support for CIM 4.18
Added support for the following messages under the juniper:junos:firewall sourcetype:
PFE_FW_SYSLOG_ETH_IP
SNMP_TRAP_LINK_UP
SNMP_TRAP_LINK_DOWN
ESWD_STP_STATE_CHANGE_INFO
ESWD_DAI_FAILED
EVENT <UpDown>