Skip to main content
Snort Alert for Splunk app icon

Snort Alert for Splunk

This app provides field extractions for Snort alert logs (fast and full) as well as dashboards, saved searches, reports, event types, tags and event search interfaces.Built by Splunk Works
splunk product badge

Default Version 1.1.2

March 4, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 6.x, 5.x, 4.x, 3.x

Rating
4
(4)

Log in to rate this app

Support
Not Supported

This app provides field extractions for Snort alert logs (fast and full) as well as dashboards, saved searches, reports, event types, tags and event search interfaces. While this app is not formally supported, the developer can be reached at gfransen@splunk.com OR in splunk-usergroups slack, @Guillaume Pierre Fransen. Responses are made on a best effort basis. Feedback is always welcome and appreciated!