Network Forensics & Security Analytics

 View Only
Back to discussions
Expand all | Collapse all

Turbocharge Your Security Analytics Exports to Splunk

  • 1.  Turbocharge Your Security Analytics Exports to Splunk

    Broadcom Employee
    Posted May 25, 2022 05:07 PM
    If you've ever wanted to export your SA alert or session metadata directly to Splunk, we have a solution for you. Our security-analytics-export-tools GitHub repository provides the code and instructions for you to export your data to Splunk Enterprise using some Python code and the open-source RabbitMQ message broker. You can implement this solution as-is or customize it for your environment or even another SIEM. This solution is capable of forwarding metadata for over 100,000 SA sessions per second. See the GitHub repo's README.md for more information.