Skip to main content
Warning
This app is archived. App archiving documentation
Splunk Add-on for Sysmon for Linux app icon

Splunk Add-on for Sysmon for Linux

The Splunk Add-on for Sysmon for Linux allows a Splunk software administrator to create a Splunk software data input and CIM-compliant field extractions for Sysmon for Linux.Built by Splunk LLC
splunk product badge

Default Version 1.0.0

October 24, 2022

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 5.x, 4.x

Rating
5
(1)

Log in to rate this app

Support
Archived Add-on
Ranking

#12 in Utilities

#36 in Security, Fraud & Compliance

The Splunk Add-on for Sysmon for Linux allows a Splunk software administrator to create a Splunk software data input and CIM-compliant field extractions for Sysmon for Linux.