Skip to main content
Warning
This app is archived. App archiving documentation
Splunk Add-on for McAfee ePO Syslog app icon

Splunk Add-on for McAfee ePO Syslog

The Splunk Add-on for McAfee ePO Syslog lets a Splunk Enterprise administrator collect anti-virus information via Syslog. You can then directly analyze the data or use it as a contextual data feed to correlate with other security data in Splunk. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk Enterprise apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.Built by Splunk LLC
splunk product badge
Default Version 1.1.0

August 22, 2022

Compatibility

Splunk Enterprise

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 5.x

Rating
2
(3)

Log in to rate this app

Support
Archived Add-on

The Splunk Add-on for McAfee ePO Syslog lets a Splunk Enterprise administrator collect anti-virus information via Syslog. You can then directly analyze the data or use it as a contextual data feed to correlate with other security data in Splunk. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk Enterprise apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.