Home¶

The Iptables Add-on allows Splunk data administrators to map netfilter events to the CIM enabling the data to be used with other Splunk Apps.

This Splunk Add-on is community driven. Any issues or feature requests may be submitted directly through Github.

Assumptions¶

This documentation assumes the following:

1. You have a linux server with the appropriate firewall tools installed.
2. You have a working Splunk environment.
3. Basic understanding of Splunk, linux, and Firewalld/UFW/Iptables.

About¶

Get Started