Getting Data In

How to add Data Sources from different devices to Splunk?

fazilhussain
Explorer

How to Add Data Sources from the following devices:

No| Data Type                     |  No’s of devices      |   Log sources 
01  Windows Servers           | 45/100 virtual      |      syslog   
02  Linux Servers                    
03  Palo Alto Firewall                   
04  Stonesoft  Firewall             
07  Bluecoat                                    
08  WAF                                     
09  Brocade Switches                                 
10  Routers                                   
11  Load Balancer-F5                                                    
12  MS Exchange                   

Please just help me on the Firewall Part how to add the Firewall, Switches, Routers, LB, MS Exchange to Splunk so Splunk start Receiving the Data for Firewall & other Devices. I Know its a huge information, I Request someone to please help me on the following.

Regards,

1 Solution

DalJeanis
SplunkTrust
SplunkTrust

Yep, what you are asking for could fill books. Before you start doing anything with splunk, find out from the tech guys WHERE those firewalls are putting their log data. It will be a directory somewhere on your network.

Then your organization has two basic choices - do they forward you a copy of that log for you to ingest, or do they let you ingest it out of that directory. Most likely, they'll want you to keep your splunky paws off their REAL log data directory, so they'll want to forward it to your indexer.

Once you know the answer to those questions, then you can get started. Review these manuals, google around, try some stuff, and then if you can't figure something out, then post a VERY SPECIFIC NEW QUESTION on the splunk answer board.

start here -
http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/Howdoyouwanttoadddata

This may also help.
http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/Configureyourinputs

View solution in original post

hunters_splunk
Splunk Employee
Splunk Employee

Hi fazilhussian,

I think you can read the Getting Data In manual to get started with collecting data into Splunk:
http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/Getstartedwithgettingdatain

Also, from your list of data types you want to ingest, I see there are some add-ons for the corresponding products that you can download from https://splunkbase.splunk.com/ and install in your environment to help you collect data:

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

Yep, what you are asking for could fill books. Before you start doing anything with splunk, find out from the tech guys WHERE those firewalls are putting their log data. It will be a directory somewhere on your network.

Then your organization has two basic choices - do they forward you a copy of that log for you to ingest, or do they let you ingest it out of that directory. Most likely, they'll want you to keep your splunky paws off their REAL log data directory, so they'll want to forward it to your indexer.

Once you know the answer to those questions, then you can get started. Review these manuals, google around, try some stuff, and then if you can't figure something out, then post a VERY SPECIFIC NEW QUESTION on the splunk answer board.

start here -
http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/Howdoyouwanttoadddata

This may also help.
http://docs.splunk.com/Documentation/Splunk/6.5.1/Data/Configureyourinputs

fazilhussain
Explorer

Thanks Hunters & Dal.
Will try.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...