Splunk for A10 Networks provides visibility into the ADC logs, allowing to detect and analyze Web traffic, trends, and Web threats.
The Splunk for A10 Networks can be installed by either the Splunk app setup screen, or by manually installing and configuring the app.
Once the app is installed, you need to do some configurations in your Splunk server and in the A10 Networks ADC. For detailed instructions please refer to the document gettingstarted.pdf located in SPLUNK_HOME/etc/apps/SplunkForA10Networks/appserver/static/gettingstarted.pdf.
NOTE: The WAF module is a new feature of the v2.7.1 ACOS code, in case you have an earlier version you will need to upgrade your appliance.
The app does source typing automatically for you. ADC's logs will have different source types depending of the type of log:
- SLB logs -> a10_slb
- WAF logs -> a10_waf
You will have to do a 2-step configuration in your ADC:
Enjoy!
And remember that feedback is welcome! Email OPEN3S: splunk-apps@open3s.com
All registered and unregistered trademarks herein are the sole property of their respective owners.
Dashboards converted to simple XML, in order to adapt app to Splunk v6.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.