Add_on_Security_Onion

This Technology Add-on (TA) provides field extractions, event types, tags, and lookups to normalize Security Onion Zeek and Suricata logs into Splunk Common Information Model (CIM). It enables better visibility into network security events and integrates seamlessly with Splunk Enterprise Security.