Latest Version 1.0.0
June 11, 2019
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
This app is archived. Learn more
Sophos XG Technical Add-on
This Add-on was designed to parse fields from Sophos XG firewall to CIM compliant fields for Network_Traffic, Intrusion_Detection, and Web data models.
Built by Brian Daniel Potter
Compatibility
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0
CIM Version: 4.x
Rating
0
(0)
Log in to rate this app
Support
Not Supported
This Add-on was designed to parse fields from Sophos XG firewall to CIM compliant fields for Network_Traffic, Intrusion_Detection, and Web data models.
Onboard data as sourcetype=sophos:xg:syslog
Data will sub-sourcetype to various sourcetypes such as sophos:xg:Firewall, sophos:xg:ContentFiltering, sophos:xg:IDP, etc.
Categories
Created By
Brian Daniel Potter
Type
addon
Downloads
1,401
Licensing
Splunk Answers
Resources
Log in to report this app listing