Radware CWAAP Event Collector

This Splunk add-on enables secure and reliable ingestion of security events from Radware Cloud WAF (CWAAP) and Layer 7 DDoS protections into Splunk. It uses Radware’s official API to collect structured logs from APPWALL_REPORTS and L7_DDOS_ATTACK_REPORT endpoints, supporting operational visibility, incident response, and threat detection use cases. The add-on includes checkpointing, chunked catch-up logic, and configurable parameters to ensure efficient and duplicate-safe event collection.