Hurricane Labs Add-On for Blue Coat Console | Splunkbase

My Account

Signup

Support & Services

Search Splunk Documentation Splunk Answers Education & Training User Groups Splunk App Developers Support Portal Contact Us

My Account

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Splunk Websites Terms and Conditions of Use

I have read the terms and conditions of this license and agree to be bound by them.

I consent to Splunk sharing my contact information with the publisher of this app so I can receive more information about the app directly from the publisher.

Thank You

Downloading Hurricane Labs Add-On for Blue Coat Console

SHA256 checksum (hurricane-labs-add-on-for-blue-coat-console_101.tgz) 07f0008ff077aad5166104afc9fba0fa28bcb368bb63f9c6413fb01883ee1133

SHA256 checksum (hurricane-labs-add-on-for-blue-coat-console_10.tgz) 3e933aae9552c86524c3eeb445bb1049fb5851f8f44e8c25f222988c17e5c211

To install your download

For instructions specific to your download, click the Details tab after closing this window.

splunk

Hurricane Labs Add-On for Blue Coat Console

Splunk Cloud

This app is NOT supported by Splunk. Please read about what that means for you here.

Overview

Details

This add-on provides field extractions and CIM compatibility for the Blue Coat ProxySG Console logs. Splunk users with Blue Coat proxies can use this to feed into Enterprise Security events relating to Authentication and Change Analysis for the proxy itself. This add-on does not support the proxy access logs already supported by the Splunk-built Blue Coat TA.

OVERVIEW

About the TA-bluecoat_console

Author	Brian T Glenn brian@hurricanelabs.com
App Version	1.0
Vendor Products	Bluecoat ProxySG 5.x and 6.x Console Messages
Has index-time operations	<true>
Create an index	<false>
Implements summarization	<false>

The TA-bluecoat_console allows a Splunk® Enterprise administrator to get field extractions
for the console and system messages of the proxy, supplying data to both the Authentication
and Change Analysis datamodels.

Release Notes

Version 1.0.1

July 1, 2020

Thank you to Chris Bell for additional field extractions!

Version 1.0

June 14, 2017

394

Downloads

Share Subscribe

Version

Built by

Hurricane Labs

Support

Not Supported

Questions on Splunk Answers Flag as inappropriate

Compatibility

Products: Splunk Enterprise, Splunk Cloud

Products: Splunk Enterprise, Splunk Cloud

Splunk Versions: 7.0, 7.1, 7.2, 7.3, 8.0, 8.1, 8.2

Platform: Platform Independent

CIM Versions: 4.x

Platform: Platform Independent

CIM Versions: 4.x

Licensing

MIT

Category & Contents

Categories: Security, Fraud & Compliance

App Type: Add-on

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Submit New Splunk App Dev Resources

Follow Us:

© 2005-2022 Splunk Inc. All rights reserved.

Sitemap | Privacy | Website Terms of Use | Splunk Licensing Terms | Export Control | Modern Slavery Statement | Splunk Patents | Report a Problem

Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.