Barracuda WAF (On Premises)¶
Key facts¶
- RFC 5424 Framed with non-standard ISO timestamp:
%Y-%m-%d %H:%M:%S.%f %z - MSG Format based filter
Links¶
| Ref | Link |
|---|---|
| Splunk Add-on | https://splunkbase.splunk.com/app/3776 |
| Product Manual | https://campus.barracuda.com/product/webapplicationfirewall/doc/92767349/exporting-log-formats/ |
Sourcetypes¶
| sourcetype | notes |
|---|---|
| barracuda:system | program(“SYS”) |
| barracuda:waf | program(“WF”) |
| barracuda:web | program(“TR”) |
| barracuda:audit | program(“AUDIT”) |
| barracuda:firewall | program(“NF”) |
Sourcetype and Index Configuration¶
| key | sourcetype | index | notes |
|---|---|---|---|
| barracuda_system | barracuda:system | netwaf | None |
| barracuda_waf | barracuda:waf | netwaf | None |
| barracuda_web | barracuda:web | netwaf | None |
| barracuda_audit | barracuda:audit | netwaf | None |
| barracuda_firewall | barracuda:firewall | netwaf | None |