Splunk for Deep Security

This repository contains parsing logic, saved searches, and dashboards for monitoring Trend Micro Deep Security via Splunk.

Table of Contents

• Usage
• Support
• Contribute

Usage

To use the Splunk app directly, see https://splunkbase.splunk.com/app/1936/.

To pack the files as a Splunk app, use the following command:

tar cvfz trend-micro-deep-security-for-splunk_xxx.tgz TrendMicroDeepSecurity

Support

This is an Open Source community project initially built by Mike Gibson, and currently supported by the Deep Security team.

For issues with Deep Security in general, please contact Trend Micro Support. Tutorials, feature-specific help, and other information about Deep Security is available from the Deep Security Help Center.

For bug reports or feature requests for this project specifically, please open an issue. Please be specific about what you're trying to do, your system, and steps to reproduce the problem. You are welcome to contribute.

Contribute

We accept contributions from the community. To submit changes:

1. Fork this repository.
2. Create a new feature branch.
3. Make your changes.
4. Submit a pull request with an explanation of your changes or additions.

We will review and work with you to release the code. For further help, please contact the Trend Micro open source support team at deepsecurityopensource@trendmicro.com.