Splunk Enterprise Security

OSSEC App and the Common Information Model

j666gak
Communicator

I am a fan on the OSSEC app, however to make proper use of it in my eyes it needs to be integrated with the Common Information Model.

Has anybody already integrated the OSSEC appp with Common Information Model i.e. field extractions and tags etc.

Thanks

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

There's a TA for it in Enterprise Security -- getting that onto Apps is on the to-do list. Note that this is a long list and timing is TBD.

View solution in original post

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

There's a TA for it in Enterprise Security -- getting that onto Apps is on the to-do list. Note that this is a long list and timing is TBD.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...