Latest Version 1.0.2
April 17, 2024
Warning
Splunkbase Classic has been deprecated and will be deactivated on February 18, 2026.
Phantom Internal Add On
Addon to collect Phantom internal logs including daemon logs, web logs, and linux audit logs.
Built by
Compatibility
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0
CIM Version: 5.x, 4.x, 3.x
Rating
0
(0)
Log in to rate this app
Support
Developer Supported addon
Addon to collect Phantom internal logs including daemon logs, web logs, and linux audit logs.
Requires NGINX TA for Web Parsing: https://splunkbase.splunk.com/app/3258/
Requires AuditD TA for Audit Parsing: https://splunkbase.splunk.com/app/4232/
Categories
IT Operations
Created By
bitsIO inc
Type
addon
Downloads
1,358
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing