Default Version 2.0.0
March 1, 2026
Aviatrix Add-on for Splunk
Field extractions, CIM compliance, and data normalization for Aviatrix Cloud Firewall logs in Splunk.Built by Chris McHenry
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 5.x, 4.x
Rating
0(0)
Log in to rate this app
Support
Developer Supported
Ranking
#40 in Firewall
Technology Add-on for Aviatrix Distributed Cloud Firewall logs. Provides field extractions, CIM-compliant data normalization, and lookup tables for Aviatrix security event data including L4/L7 firewall, FQDN egress filtering, Suricata IDS alerts, gateway telemetry, and controller audit logs. Maps to Network Traffic, Intrusion Detection, and Change Analysis CIM data models. Designed to work alongside the Aviatrix Security app for dashboards and visualizations.
Categories
Security, Fraud & Compliance, Firewall
Created by
Chris McHenry
Source code
Type
addon
Downloads
31
Splunk Answers
Resources
Log in to report this app listing.