splunk
VMware NSX add-on
Splunk Cloud
Overview
Splunk add-on for CIM mapping of VMware NSX syslog fields and tagging for data models, including IDS.
Note that the event types and some of the fields may need to be adjusted based on how your NSX tags the syslog messages.
The add-on need to be installed on the search heads for parsing.
This add-on was inspired by the "VMware NSX-T Splunk App" (https://splunkbase.splunk.com/app/4241).
Note that the event types and some of the fields may need to be adjusted based on how your NSX tags the syslog messages.
The add-on need to be installed on the search heads for parsing.
This add-on was inspired by the "VMware NSX-T Splunk App" (https://splunkbase.splunk.com/app/4241).
Release Notes
Version 1.0.2
March 23, 2023
Changing file permission to add cloud compatibility.
Version 1.0.1
March 14, 2023
Initial public release of TA.