[Oisf-users] Suricata's files-json.log and Splunk

[Marcos Rodriguez]

Hi Everyone,

Just out of curiosity, has anyone played with ingesting files-json.log into
Splunk?  If so, how is that working out?   I may play around with that,
since we're a Splunk shop for part of our research activities.  I just
wanted to see how people are using the new JSON output.  Thanks!

marcos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120420/3cfcfac9/attachment-0002.html>