CCX Add-on for Broadcom Products

About Us: CyberCX is Australia's greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Add-on for Broadcom Products looks to provide a single field extraction bundle for Broadcom Products logs. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Broadcom Products. Currently this add-on provides additional field extraction and CIM compliance for sourcetype: - ca:pam:syslog (Broadcom Symantec Privileged Access Management (PAM)) Syslog forwarding in XML format Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alert, Authentication and Change.