[Zeek] Documentation about Corelight's Splunk Apps for Zeek

[Amber Graner]

Hi Carlos,

I reached out to Corelight and below is the response:

Docs and downloads can be found here:
App - https://splunkbase.splunk.com/app/3884/
TA - https://splunkbase.splunk.com/app/3885/

At a very basic level the install guidance is this:

   - For stand alone Splunk instances - install the Corelight App for
   Splunk ONLY using the Splunk Web UI
   - For distributed instances - installed the Corelight App for Splunk on
   search head(s) using the Splunk Web UI, install the TA on indexers and/or
   heavy forwarders using install method of choice (cli, web ui, or deployment
   server)

Thanks,
~Amber

On Fri, Dec 20, 2019 at 7:03 AM Amber Graner <akgraner at corelight.com> wrote:

> Hi Carlos,
>
> As that is a Corelight offering and not something maintained by the Zeek
> Project or the community, we’d have to refer you to Corelight.
>
> Let me find out who you need to talk to and I’ll make introductions.
>
> Thanks,
> ~Amber
>
> On Fri, Dec 20, 2019 at 3:56 AM Carlos Lopez <clopmz at outlook.com> wrote:
>
>> Hi all,
>>
>>
>>
>> I would like to install Corelight App For Splunk and TA for Corelight,
>> but there is no documentation about how to accomplish it … All info points
>> to https://www.corelight.com/support/, but there is no docs in there …
>>
>>
>>
>> Any idea?
>>
>>
>>
>>
>>
>> --
>>
>> Regards,
>>
>> C. L. Martinez
>> _______________________________________________
>> Zeek mailing list
>> zeek at zeek.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
> --
>
> *Amber Graner*
> Director of Community
> Corelight, Inc
>
> 828.582.9469
>
> Schedule time on my calendar here. <https://calendly.com/amber_graner>
>
>
>
>  * Ask me about how you can participate in the Zeek (formerly Bro)
> community.
>  * Remember - ZEEK AND YOU SHALL FIND!!
>
>
>

-- 

*Amber Graner*
Director of Community
Corelight, Inc

828.582.9469

Schedule time on my calendar here. <https://calendly.com/amber_graner>



 * Ask me about how you can participate in the Zeek (formerly Bro)
community.
 * Remember - ZEEK AND YOU SHALL FIND!!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191220/de5188b0/attachment.html