Latest Version 1.1.0
January 12, 2026
Warning
Splunkbase Classic has been deprecated and will be deactivated on February 18, 2026.
TA-pfsense-plus
Parse and normalize pfSense logs in Splunk, including pfBlockerNG DNSBL and IP block events.
Built by
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.1, 10.0
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Ranking
#32
in Firewall
#48
in Network Device
TA‑pfsense‑plus is a Splunk Technology Add‑on for pfSense logs. It provides sourcetypes, field extractions, and lookups to normalize firewall, DNS, VPN, IDS/IPS, and pfBlockerNG (DNSBL/IP) data so it’s searchable and ready for dashboards or investigations.
Categories
Firewall, Network Device
Created By
Paul Metcalf
Source Code
ptmetcalf/ta-pfsense-plus(Opens new window)Type
addon
Downloads
95
Licensing
MIT License(Opens new window)Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing