Skip to content

Need to onboard new Cradlepoint product syslogs into Splunk #2743

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lmsunilsameleti opened this issue Apr 28, 2025 · 2 comments
Open

Need to onboard new Cradlepoint product syslogs into Splunk #2743

lmsunilsameleti opened this issue Apr 28, 2025 · 2 comments
Labels
Application core dependency in sc4s enhancement New feature or request

Comments

@lmsunilsameleti
Copy link

Note: If your issue is not a bug or a feature request, please raise a support ticket through our support portal (Splunk.com > Support > Support Portal). This will help us resolve your issue more efficiently and provide you with better assistance. For more information on how to work with the Splunk Support, please refer to this guide.

What is the sc4s version?
3.33.1v
Is there a pcap available? If so, would you prefer to attach it to this issue or send it to Splunk support?
NO
What the vendor name?
Cradlepoint acquired by Ericsson Wireless
What's the product name?
Cradlepoint acquired by Ericsson Wireless
If you're requesting support for a new vendor, do you have any preferences regarding the default index and sourcetype for their events?
NO
Do you have syslog documentation or a manual for that device??
Yes
Feature Request description:
Please create a new Parser to onboard Cradlepoint product syslogs into Splunk
Do you want to have it for local usage or prepare a github PR?
github PR

Cradlepoint_RawLogs.txt

Please work with [email protected] for this issue.

@lmsunilsameleti
Copy link
Author

Please let me know if you have any update on this. As business is looking for this case.
It is a major CSOC Usecase.

@rjha-splunk
Copy link
Collaborator

We will delegate it to the PM to review this product to be added to the core parser, the data attached isnt RFC compliant log.

@rjha-splunk rjha-splunk added enhancement New feature or request Application core dependency in sc4s labels Apr 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Application core dependency in sc4s enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants