This app provides CIM-compatible knowledge objects for working with CloudGenix flow logs.
|Author||Tom Kopchak, Hurricane Labs|
|Vendor Products||CloudGenix - Flow Logs|
|Has index-time operations||false|
|Create an index||false|
This add-on should be installed on search heads
Configured your CloudGenix flow logs to be collected and indexed into Splunk with the sourcetype of cloudgenix:flow. We recommend using a syslog-ng server with a filter to capture these logs.
Vendor documentation of log format use for this app is available here: https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-sites-and-devices/use-external-services-for-monitoring/syslog-server-support-in-prisma-sd-wan/syslog-flow-export
Initial app release
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.