Skip to content
#

splunk-universal-forwarder

Star

Here are 16 public repositories matching this topic...

Language: All
Filter by language
All 16 Shell 3 Python 2 Dockerfile 1 Java 1 PowerShell 1 Puppet 1 TypeScript 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

Truvis / Splunk_TA_Truvis_Suricata5

Star 15

This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server

security splunk suricata siem network-security-monitoring splunk-http network-security splunk-enterprise splunk-application security-dashboard splunk-universal-forwarder splunk-sdk splunk-searches splunk-hec security-monitoring splunk-alerts splunk-addon splunk-impact-cloud security-alerts splunk-security
  • Updated Sep 5, 2020

jashuboy / SOC-Detection-Engineering-Threat-Hunting-Lab-using-Splunk-and-Sysmon

Star 0

A cloud-based SOC Detection Engineering & Threat Hunting Lab built using Splunk, Sysmon, Windows Event Logs, and GCP to simulate real-world attacks, monitor endpoint telemetry, create detections and alerts, perform incident investigation, and analyze attacker behavior using SIEM and threat hunting techniques.

windows linux alerts cloud log-analysis telemetry brute-force sysmon network-scanning splunk-enterprise splunk-universal-forwarder incident-analysis attack-simulation dashboard-development
  • Updated Jun 7, 2026

Improve this page

Add a description, image, and links to the splunk-universal-forwarder topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the splunk-universal-forwarder topic, visit your repo's landing page and select "manage topics."

Learn more