https://github.com/secnnet/splunkcollectorandforwarder

https://github.com/secnnet/splunkcollectorandforwarder

automation configuration data-ingestion deployment event-collector logging monitoring powershell rest-api security splunk universal-forwarder

Last synced: about 1 month ago
JSON representation

• Host: GitHub
• URL: https://github.com/secnnet/splunkcollectorandforwarder
• Owner: secnnet
• License: mit
• Created: 2023-06-20T10:29:51.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-10-19T10:05:45.000Z (over 1 year ago)
• Last Synced: 2024-11-10T12:17:44.821Z (3 months ago)
• Topics: automation, configuration, data-ingestion, deployment, event-collector, logging, monitoring, powershell, rest-api, security, splunk, universal-forwarder
• Language: PowerShell
• Homepage:
• Size: 5.86 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# SplunkCollectorAndForwarder

PowerShell scripts and config for Splunk.

- **Collector.ps1**: POSTs data to Splunk.

- **Script.ps1**: Downloads and sets up Splunk Forwarder.

- **inputs.conf**: Collects specific logs in Splunk.

**Use**:

1. Set addresses/tokens in scripts.

2. Run scripts.

3. Adjust `inputs.conf` in `$SPLUNK_HOME/etc/system/local`.

**License**: MIT