All Apps and Add-ons

Trendmicro deep security logs integration with Splunk

deepjyoti0503
New Member

Hi All,

I am trying to integrate trend micro deep security file integrity monitoring logs to Splunk. Configured trend micro admin part for log forwarding with UDP port 5514

current setup is three different server for SH, Indexer, Forwarder.

Also setup UDP listner in SH with port 5514. But unable to get any data.

Kindly help me on this.

0 Karma

woodcock
Esteemed Legend

Do not send directly to Splunk Indexers (although this is really easy to setup).

This is the old-school hotness: http://www.georgestarcher.com/splunk-success-with-syslog/
This is the hot new thing: https://www.splunk.com/blog/2017/03/30/syslog-ng-and-hec-scalable-aggregated-data-collection-in-splu...

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...