Splunk Add-on for McAfee ePO Syslog

Version	1.1.0
Vendor Products	McAfee Endpoint ePO v5.10 McAfee Endpoint Security v10.6.0 v10.6.1 v10.6.1.1607 v10.7.0 v10.7.0.1285 v10.7.0.3255
Visible in Splunk Web	No. This add-on does not contain any views.

The Splunk Add-on for McAfee ePO Syslog lets a Splunk Enterprise administrator collect anti-virus information via Syslog. You can then directly analyze the data or use it as a contextual data feed to correlate with other security data in Splunk. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk Enterprise apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.

Download the Splunk Add-on for McAfee ePO Syslog from Splunkbase.

For a summary of new features, fixed issues, and known issues, see Release Notes for the Splunk Add-on for McAfee ePO Syslog.

For information about installing and configuring the Splunk Add-on for McAfee, see Install the Splunk Add-on for McAfee ePO Syslog.