Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

How Get Bluecoat CacheFlow log in splunkstorm

$
0
0

Hi

I'm trying to send a log from Bluecoat Cacheflow 5000 to splunkstorm with the format listed below

type elff "date time c-ip sc-bytes cs-bytes rs-bytes sr-bytes cs-host"

I am interested to get only the source address and host domain of all the conections crossing by the cacheflow.

I don´t have problem sending those logs to splunkstorm, but the information gathering is displayed in an unreadable format.

Does anybody know how make these posible.

Thanks in advance


Viewing all articles
Browse latest Browse all 13053

Trending Articles