Skip to content

Platform

This source requires a TLS connection; in most cases enabling TLS and using the default port 6514 is adequate. The source is understood to require a valid certificate.

Key facts

  • MSG Format based filter
  • Requires TLS and uses IETF Frames use port 6587 after TLS Configuration
Ref Link
Splunk Add-on https://splunkbase.splunk.com/app/4439/

Sourcetypes

sourcetype notes
tanium none

Index Configuration

key index notes
tanium_syslog epintel none