Splunk Dev

cisco_ironport_web.log sample data needed

pbugeja
New Member

I am building an index and would like to get some sample data, specifically Cisco Ironport Web data that contains a user, URL and domain fields.

Tags (1)
0 Karma

mattymo
Splunk Employee
Splunk Employee

Hi pbugeja!

PRO TIP! : Splunk built TAs usually contain a sample directory! Gives you an idea what we used to build the TAs!

Check out the Cisco WSA TA, it has a few goodies in there! Hopefully one fits your needs!

https://splunkbase.splunk.com/app/1747/

alt text

- MattyMo
0 Karma

pbugeja
New Member

Hi Asimagu,

I appreciate your reply, but I had reviewed the logs on the OSSEC site and was not able to find the appropriate log that contained the fields needed.
/Paul

0 Karma

asimagu
Builder
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...