[Zeek] Documentation about Corelight's Splunk Apps for Zeek

[Steve Smoot]

Also in the Apps that Amber pointed to in the "Details" tab, there are
instructions for install/config.
Though depending on the environment specific instructions around
sourcetypes and index names will differ due to local configuration.

-s

On Fri, Dec 20, 2019 at 7:45 AM Amber Graner <akgraner at corelight.com> wrote:

> Hi Carlos,
>
> I reached out to Corelight and below is the response:
>
> Docs and downloads can be found here:
> App - https://splunkbase.splunk.com/app/3884/
> TA - https://splunkbase.splunk.com/app/3885/
>
> At a very basic level the install guidance is this:
>
>    - For stand alone Splunk instances - install the Corelight App for
>    Splunk ONLY using the Splunk Web UI
>    - For distributed instances - installed the Corelight App for Splunk
>    on search head(s) using the Splunk Web UI, install the TA on indexers
>    and/or heavy forwarders using install method of choice (cli, web ui, or
>    deployment server)
>
> Thanks,
> ~Amber
>
> On Fri, Dec 20, 2019 at 7:03 AM Amber Graner <akgraner at corelight.com>
> wrote:
>
>> Hi Carlos,
>>
>> As that is a Corelight offering and not something maintained by the Zeek
>> Project or the community, we’d have to refer you to Corelight.
>>
>> Let me find out who you need to talk to and I’ll make introductions.
>>
>> Thanks,
>> ~Amber
>>
>> On Fri, Dec 20, 2019 at 3:56 AM Carlos Lopez <clopmz at outlook.com> wrote:
>>
>>> Hi all,
>>>
>>>
>>>
>>> I would like to install Corelight App For Splunk and TA for Corelight,
>>> but there is no documentation about how to accomplish it … All info points
>>> to https://www.corelight.com/support/, but there is no docs in there …
>>>
>>>
>>>
>>> Any idea?
>>>
>>>
>>>
>>>
>>>
>>> --
>>>
>>> Regards,
>>>
>>> C. L. Martinez
>>> _______________________________________________
>>> Zeek mailing list
>>> zeek at zeek.org
>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>>
>> --
>>
>> *Amber Graner*
>> Director of Community
>> Corelight, Inc
>>
>> 828.582.9469
>>
>> Schedule time on my calendar here. <https://calendly.com/amber_graner>
>>
>>
>>
>>  * Ask me about how you can participate in the Zeek (formerly Bro)
>> community.
>>  * Remember - ZEEK AND YOU SHALL FIND!!
>>
>>
>>
>
> --
>
> *Amber Graner*
> Director of Community
> Corelight, Inc
>
> 828.582.9469
>
> Schedule time on my calendar here. <https://calendly.com/amber_graner>
>
>
>
>  * Ask me about how you can participate in the Zeek (formerly Bro)
> community.
>  * Remember - ZEEK AND YOU SHALL FIND!!
>
>
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
*Stephen R. Smoot, PhD*
VP, Customer Success
Corelight
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191220/85927aa5/attachment.html