splunk/eventgen

Stars
354
Rank 120,042 (Top 3 %)
Language
Python
License
Apache License 2.0
Created over 12 years ago
Updated over 1 year ago

splunk/eventgen

splunk

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Splunk Event Generator: Eventgen

Splunk Event Generator (Eventgen)

Status

Introduction

Splunk Event Generator is a utility that helps users easily build real-time event generators. The current maintainers of this project are Brian Bingham ([email protected]), Tony Lee ([email protected]), and Jack Meixensperger ([email protected]).

The goals of this project:

Eliminate the need for hand-coded event generators in Splunk apps
Allow for portability of event generators between applications and allow templates to be quickly adapted between use cases
Allow every type of events or transactions to be modeled inside Eventgen

Downloading a Splunk Eventgen App

Please go to splunkbase-Eventgen

Documentation

Documentation is hosted at Eventgen Documentation.

Contributing

Please note CONTRIBUTING.md.

License

Splunk Event Generator is licensed under the Apache License 2.0. Details can be found in the LICENSE file.

Support

This software is released as-is. Splunk provides no warranty and no support on this software. If you have any issues with the software, please read over the guidelines and file an issue.

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

security_content

Splunk Security Content

splunk-sdk-python

Splunk Software Development Kit for Python

attack_data

A repository of curated datasets from various attacks

docker-splunk

Splunk Docker GitHub Repository

splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

botsv2

Splunk Boss of the SOC version 2 dataset.

splunk-connect-for-kubernetes

Helm charts associated with kubernetes plug-ins

docker-splunk-legacy

Docker Splunk *** LEGACY IMAGES - PLEASE SEE https://github.com/splunk/docker-splunk INSTEAD ***

botsv1

pion

Pion Network Library (Boost licensed open source)

splunk-operator

Splunk Operator for Kubernetes

splunk-sdk-javascript

Splunk Software Development Kit for JavaScript

botsv3

Splunk Boss of the SOC version 3 dataset.

melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

qbec

configure kubernetes objects on multiple clusters using jsonnet

splunk-connect-for-syslog

Splunk Connect for Syslog

splunk-sdk-java

Splunk Software Development Kit for Java

splunk-library-javalogging

Splunk logging appenders for popular Java Logging frameworks

ansible-role-for-splunk

Splunk@Splunk's Ansible role for installing Splunk, upgrading Splunk, and installing apps/addons on Splunk deployments (VM/bare metal)

attack_range_local

Build a attack range in your local machine

splunk-platform-automator

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

SA-ctf_scoreboard

splunk-aws-cloudformation

AWS CloudFormation templates for Splunk distributed cluster deployment

terraform-provider-splunk

Terraform Provider for Splunk

securitydatasets

Home for Splunk security datasets.

splunk-aws-project-trumpet

splunk-app-examples

App examples for Splunk Enterprise

splunk-demo-collector-for-analyticsjs

Example Node.js based backend collector for client-side data

vscode-extension-splunk

Visual Studio Code Extension for Splunk

observability-workshop

To get started, please proceed to The Splunk Observability Cloud Workshop Homepage.

mltk-algo-contrib

fluent-plugin-splunk-hec

This is the Fluentd output plugin for sending events to Splunk via HEC.

network-explorer

kafka-connect-splunk

Kafka connector for Splunk

splunk-javascript-logging

Splunk HTTP Event Collector logging interface for JavaScript

splunk-reskit-powershell

Splunk Resource Kit for Powershell

corona_virus

This project includes an app that allows users to visualize and analyze information about COVID-19 using data made publicly-available by Johns Hopkins University. For more information on legal disclaimers, please see the README.

contentctl

Splunk Content Control Tool

salo

Synthetic Adversarial Log Objects: A Framework for synthentic log generation

ShellSweep

ShellSweeping the evil.

docker-itmonitoring

Get Started with Streaming your Docker Logs and Stats in Splunk!

splunk-sdk-csharp-pcl

Splunk's next generation C# SDK

docker-logging-plugin

Splunk Connect for Docker is a Docker logging plugin that allows docker containers to send their logs directly to Splunk Enterprise or a Splunk Cloud deployment.

attack-detections-collector

Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique

splunk-aws-serverless-apps

Splunk AWS Serverless applications and Lambda blueprints

splunk-webframework

Splunk Web Framework

splunk-app-splunkgit

vault-plugin-secrets-gitlab

Vault Plugin for Gitlab Project Access Token

pytest-splunk-addon

A Dynamic test tool for Splunk Technology Add-ons

splunk-mltk-container-docker

Splunk App for Data Science and Deep Learning - container images repository

Jupyter Notebook

rba

RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high-fidelity, low-volume alerts.

splunk-cloud-sdk-go

The Splunk Cloud SDK for Go, contains libraries for building apps for the Splunk Cloud Services Platform.

splunk-app-testing

sample app along with a CICD pipeline for testing multiple versions of splunk

rwi_executive_dashboard

Splunk Remote Work Insights - Executive Dashboard

splunk-sdk-ruby

Splunk Software Development Kit for Ruby

splunk-shuttl

Splunk app for archive management, including HDFS support.

attack_range_cloud

Attack Range to test detection against nativel serverless cloud services and environments

addonfactory-ucc-generator

A framework to generate UI-based Splunk Add-ons.

splunk-for-securityHub

azure-functions-splunk

Azure Functions for getting data in to Splunk

dashboard-conf19-examples

Splunk new dashboard framework examples .conf 2019

github_app_for_splunk

A collection of dashboards and knowledge objects for Github data

splunk-connect-for-snmp

twinclams

because twin clams are better than one clam?

jupyterhub-istio-proxy

JupyterHub proxy implementation for kubernetes clusters running istio service mesh

observability-content-contrib

Contribution repository for Splunk Observability Content (e.g. Dashboards, Detectors, Examples, etc)

lightproto

Protobuf compatible code generator

splunk-app-twitter

Twitter application for Splunk

splunk-library-dotnetlogging

Support for logging from .NET Tracing and ETW / Semantic Logging ApplicationBlock to Splunk.

splunkrepl

An awesome little REPL for issuing SPLUNK queries

fluent-plugin-kubernetes-objects

This is the Fluentd input plugin which queries Kubernetes API to collect Kubernetes objects (like Nodes, Namespaces, Pods, etc.)

splunk-ref-pas-code

Splunk Reference App - Pluggable Auditing System (PAS) - Code Repo

vault-plugin-splunk

Vault plugin to securely manage Splunk admin accounts and password rotation

splunk-sdk-php

Splunk Software Development Kit for PHP

splunk-heatwave-viz

A heatmap vizualization of bucketed ranged data over time.

pipelines

Concurrent processing pipelines in Go.

splunk-gcp-functions

PEAK

Security Content for the PEAK Threat Hunting Framework

Jupyter Notebook

splunk-tableau-wdc

Splunk Tableau Web Data Connector (WDC) Example

splunkforjenkins

splunk-3D-graph-network-topology-viz

Plot relationships between objects with force directed graph based on ThreeJS/WebGL.

minecraft-app

Splunking Minecraft with the App Framework

splunk-add-on-jira-alerts

Splunk custom alert action for Atlassian JIRA

terraform-provider-scp

Splunk Terraform Provider to manage config resources for Splunk Cloud Platform

splunk-bunyan-logger

A Bunyan stream for Splunk's HTTP Event Collector

slack-alerts

Splunk custom alert action for sending messages to Slack channels

public-o11y-docs

Splunk Observability Cloud docs

dashpub

Generate next.js apps to publish Splunk dashboards

vale-splunk-style-guide

Splunk Style Guide for the Vale linter

SA-ctf_scoreboard_admin

acs-privateapps-demo

Demo of private-apps ci/cd integration into splunkcloud using the admin config service

splunk-cloud-sdk-python

The Splunk Cloud SDK for Python, contains libraries for building apps for the Splunk Cloud Services Platform.

fabric-logger

Logs blocks, transactions and events from Hyperledger Fabric to Splunk.

deep-learning-toolkit

Deep Learning Toolkit for Splunk

k8s-yaml-patch

jsonnet library to patch objects loaded from yaml

acs-cli

Admin Config Service CLI

TA-osquery

A Splunk technology add-on for osquery

ml-toolkit-docs

ML Toolkit & Showcase application documents

splunk-sdk-csharp

Splunk Software Development Kit for CSharp