Pritunl Add-on for Splunk

Field extraction and CIM mapping for Pritunl VPN journal logs.Built by Netbytesec Sdn Bhd

Default Version 1.1.0

February 11, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 6.x, 5.x

Rating

(1)

Support

Developer Supported

Pritunl Add-on for Splunk provides basic field extraction for Pritunl VPN journal logs. It extracts key fields such as user, organization, server, remote/virtual IP addresses, and maps them to CIM-compatible field aliases (src_ip, dest_ip). Supports network, session, and VPN event tagging for use with Splunk Enterprise Security and other CIM-based apps.