Re: Documentation about Corelight's Splunk Apps for Zeek
Eric Ooi <[email protected]> Fri, 20 Dec 2019 12:52:40 +0000
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <DM6PR04MB62517CD7BB50258633EF10CAA12D0@DM6PR04MB6251.namprd04.prod.outlook.com> |
--===============0558465874== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_DM6PR04MB62517CD7BB50258633EF10CAA12D0DM6PR04MB6251namp_" --_000_DM6PR04MB62517CD7BB50258633EF10CAA12D0DM6PR04MB6251namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Assuming you=92re doing an install on a standalone Splunk server, you can u= se my guide here: https://www.ericooi.com/zeekurity-zen-part-iii-how-to-sen= d-zeek-bro-logs-to-splunk/ ________________________________ From: [email protected] on behalf of Amber Graner <[email protected]= om> Sent: Friday, December 20, 2019 6:13 AM To: Carlos Lopez Cc: [email protected] Subject: Re: [Zeek] Documentation about Corelight's Splunk Apps for Zeek Hi Carlos, As that is a Corelight offering and not something maintained by the Zeek Pr= oject or the community, we=92d have to refer you to Corelight. Let me find out who you need to talk to and I=92ll make introductions. Thanks, ~Amber On Fri, Dec 20, 2019 at 3:56 AM Carlos Lopez <[email protected]<mailto:clo= [email protected]>> wrote: Hi all, I would like to install Corelight App For Splunk and TA for Corelight, but = there is no documentation about how to accomplish it =85 All info points to= https://www.corelight.com/support/, but there is no docs in there =85 Any idea? -- Regards, C. L. Martinez _______________________________________________ Zeek mailing list [email protected]<mailto:[email protected]> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek -- Amber Graner Director of Community Corelight, Inc 828.582.9469 Schedule time on my calendar here.<https://calendly.com/amber_graner> [https://docs.google.com/uc?export=3Ddownload&id=3D1Pst1UL56ibuX2pFmisz34= iKLVlU8LSjd&revid=3D0B0wAXWxdbUhfQmZtTHhhTlJtS3ZuZnN1QkRDRW80UjZnTno4PQ] [= https://docs.google.com/uc?export=3Ddownload&id=3D1eqoMcNL7TDN2I-N9dIlYt0Yi= dwg04aeu&revid=3D0B0wAXWxdbUhfSTdRUThMWitxYUE5MTczVHpIUUFIVE5jdmFvPQ] * Ask me about how you can participate in the Zeek (formerly Bro) communit= y. * Remember - ZEEK AND YOU SHALL FIND!! --_000_DM6PR04MB62517CD7BB50258633EF10CAA12D0DM6PR04MB6251namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> </head> <body> <div> <div> <div> <div style=3D"direction: ltr;">Assuming you=92re doing an install on a stan= dalone Splunk server, you can use my guide here: https://www.ericooi.com/ze= ekurity-zen-part-iii-how-to-send-zeek-bro-logs-to-splunk/</div> </div> <div><br> </div> <div class=3D"ms-outlook-ios-signature"></div> </div> <div> </div> <hr style=3D"display:inline-block;width:98%" tabindex=3D"-1"> <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif"><b= >From:</b> [email protected] on behalf of Amber Graner <akgraner@cor= elight.com><br> <b>Sent:</b> Friday, December 20, 2019 6:13 AM<br> <b>To:</b> Carlos Lopez<br> <b>Cc:</b> [email protected]<br> <b>Subject:</b> Re: [Zeek] Documentation about Corelight's Splunk Apps for = Zeek <div> </div> </font></div> <meta content=3D"text/html; charset=3Dutf-8"> <div> <div dir=3D"auto">Hi Carlos, </div> </div> <div dir=3D"auto"><br> </div> <div dir=3D"auto">As that is a Corelight offering and not something maintai= ned by the Zeek Project or the community, we=92d have to refer you to Corel= ight.</div> <div dir=3D"auto"><br> </div> <div dir=3D"auto">Let me find out who you need to talk to and I=92ll make i= ntroductions. </div> <div dir=3D"auto"><br> </div> <div dir=3D"auto">Thanks,</div> <div dir=3D"auto">~Amber </div> <div><br> <div class=3D"gmail_quote"> <div dir=3D"ltr" class=3D"gmail_attr">On Fri, Dec 20, 2019 at 3:56 AM Carlo= s Lopez <<a href=3D"mailto:[email protected]">[email protected]</a>>= ; wrote:<br> </div> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex; border-left:1= px #ccc solid; padding-left:1ex"> <div lang=3D"ES"> <div class=3D"m_-8539200065328225637WordSection1"> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">Hi a= ll,<u></u><u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt"><u><= /u> <u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">I wo= uld like to install Corelight App For Splunk and TA for Corelight, but ther= e is no documentation about how to accomplish it =85 All info points to </span><a href=3D"https://www.corelight.com/support/" target=3D"_blank"><sp= an lang=3D"EN-US">https://www.corelight.com/support/</span></a><span lang= =3D"EN-US">, but there is no docs in there =85<u></u><u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u> <u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Any idea?</span></p> </div> </div> <div lang=3D"ES"> <div class=3D"m_-8539200065328225637WordSection1"> <p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u><u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt"><u><= /u> <u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt"><u><= /u> <u></u></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">--&n= bsp;<u></u><u></u></span></p> <div> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">Rega= rds,<u></u><u></u></span></p> </div> <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">C. L= . Martinez</span><span lang=3D"EN-US"><u></u><u></u></span></p> </div> </div> _______________________________________________<br> Zeek mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a><br> <a href=3D"http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek" rel=3D"n= oreferrer" target=3D"_blank">http://mailman.ICSI.Berkeley.EDU/mailman/listi= nfo/zeek</a></blockquote> </div> </div> -- <br> <div dir=3D"ltr" class=3D"gmail_signature"> <div dir=3D"ltr"> <div> <div dir=3D"ltr"> <div> <div dir=3D"ltr"> <div dir=3D"ltr"> <div dir=3D"ltr"> <div><br> </div> <div><b>Amber Graner</b><br> </div> <div dir=3D"ltr"> <div>Director of Community</div> <div>Corelight, Inc</div> <div><br> </div> <div>828.582.9469</div> <div><br> </div> <div>Schedule time on my calendar <a href=3D"https://calendly.com/amber_gra= ner" target=3D"_blank"> here.</a></div> <div><br> </div> <div> <img width=3D"96" height=3D"30" src=3D"https://docs.google= .com/uc?export=3Ddownload&id=3D1Pst1UL56ibuX2pFmisz34iKLVlU8LSjd&re= vid=3D0B0wAXWxdbUhfQmZtTHhhTlJtS3ZuZnN1QkRDRW80UjZnTno4PQ"> <img width= =3D"96" height=3D"39" src=3D"https://docs.google.com/uc?export=3Ddownload&a= mp;id=3D1eqoMcNL7TDN2I-N9dIlYt0Yidwg04aeu&revid=3D0B0wAXWxdbUhfSTdRUThM= WitxYUE5MTczVHpIUUFIVE5jdmFvPQ"><br> </div> <div><br> </div> <div> * Ask me about how you can participate in the Zeek (formerly Bro= ) community.</div> <div> * Remember - ZEEK AND YOU SHALL FIND!!</div> <div><br> </div> <div><br> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </body> </html> --_000_DM6PR04MB62517CD7BB50258633EF10CAA12D0DM6PR04MB6251namp_-- --===============0558465874== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek --===============0558465874==--