McAfee/SkyHigh FireCore technical Add-On (McAfee Client Proxy MCP UCE)

This Add-On provides input for McAfee/SkyHigh FireCore and McAfee Client Proxy (MCP) Logs Together with McAfee FireCore App this Add-On helps to setup and maintain McAfee Client Proxy (MCP) deployment. This app allows you to collect FireCore logs from one or many systems and shows which connections are being redirected to proxy and which connections bypass proxy. This add-on provides the CIM-compatible knowledge to use with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. Discuss the Splunk Add-On for McAfee FireCore on Splunk Answers at http://answers.splunk.com/answers/app/4762