Default Version 1.0.0
June 11, 2019
Warning
This app is archived. App archiving documentation
Sophos XG Technical Add-on
This Add-on was designed to parse fields from Sophos XG firewall to CIM compliant fields for Network_Traffic, Intrusion_Detection, and Web data models.Built by Brian Daniel Potter
Compatibility
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 4.x
Rating
1(1)
Log in to rate this app
Support
Archived Add-on
This Add-on was designed to parse fields from Sophos XG firewall to CIM compliant fields for Network_Traffic, Intrusion_Detection, and Web data models. Onboard data as sourcetype=sophos:xg:syslog Data will sub-sourcetype to various sourcetypes such as sophos:xg:Firewall, sophos:xg:ContentFiltering, sophos:xg:IDP, etc.
Categories
Security, Fraud & Compliance
Created by
Brian Daniel Potter
Type
addon
Downloads
1,419
Splunk Answers
Resources
Log in to report this app listing.