Skip to content

Netscaler ADC/SDX

Key facts

  • MSG Format based filter
  • None conformant legacy BSD Format default port 514
Ref Link
Splunk Add-on https://splunkbase.splunk.com/app/2770/
Product Manual https://docs.citrix.com/en-us/citrix-adc/12-1/system/audit-logging/configuring-audit-logging.html

Sourcetypes

sourcetype notes
citrix:netscaler:syslog None
citrix:netscaler:appfw None
citrix:netscaler:appfw:cef None

Sourcetype and Index Configuration

key sourcetype index notes
citrix_netscaler citrix:netscaler:syslog netfw none
citrix_netscaler citrix:netscaler:appfw netfw none
citrix_netscaler citrix:netscaler:appfw:cef netfw none

Source Setup and Configuration

  • Follow vendor configuration steps per Product Manual above. Ensure the data format selected is “DDMMYYYY”