Symantec Security Information Manager (SSIM) Migration

We are looking at migrating some of our SSIM rules to Splunk saved/scheduled/realtime searches. I was wondering if anyone else has done this?

I had some concerns over the SSIM 'Tracking Keys' and rule types. If anyone has done a migration from Symantec SSIM to Splunk, please PM me.

Thanks

Troy

symantec

asked 25 Aug '11, 13:50

troywollensl...
39●2
accept rate: 10%

Be the first one to answer this question!

toggle preview

Email:

RSS:

Answers

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

Tags:

Asked: 25 Aug '11, 13:50

Seen: 725 times

Last updated: 25 Aug '11, 13:50