Skip to content

CMS

Key facts

  • MSG Format based filter
  • Legacy BSD Format default port 514
Ref Link
Technology Add-On for FireEye https://splunkbase.splunk.com/app/1904/

Sourcetypes

sourcetype notes
fe_cef_syslog

Index Configuration

key sourcetype index notes
FireEye_CMS fe_cef_syslog fireeye