CCX Add-on for Radware WAF AppWall

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Add-on for Radware WAF AppWall looks to provide a single field extraction bundle for Radware WAF AppWall logs ingested via syslog. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Radware WAF AppWall. Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alert, IDS, Network Traffic, and Web.

Built by Matthew Orme

Latest Version 1.0.1

August 30, 2023

Release notes

Compatibility

Not Available

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1

CIM Version: 5.x, 4.x

Rating

0

(0)

Log in to rate this app

Support

Developer Supported addon

Learn more

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Add-on for Radware WAF AppWall looks to provide a single field extraction bundle for Radware WAF AppWall logs ingested via syslog. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Radware WAF AppWall. Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alert, IDS, Network Traffic, and Web.