About Munju1

Munju1 · ‎10-25-2021

Hello Splunk World, I'm working on importing raw logs from McAfee ELM to Splunk. The only option I've come across from McAfee documentation is sftp. Reaching out to see if anyone has had experience routing data from ELM into Splunk and a good method to do so. Thank you.

Munju1 · ‎07-22-2021

We have one ES search head in a distributed environment. 1. If the search head goes down, do alerts queue up and trigger actions once Splunk is back up? 2. If yes, for what period of time are alerts retained for? Thank you.

Posts	2
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎06-30-2021

Online Status	Offline
Date Last Visited	‎10-25-2021 07:06 PM

McAfee Enterprise Log Manager (EML) data to Splunk

If a search head goes down do alerts queue until i...

McAfee Enterprise Log Manager (EML) data to Splunk

If a search head goes down do alerts queue until i...