Add ports and logs

Use boolean toggles to add logs

SELinux provides options to toggle booleans. For example, to access /var/log in Splunk Enterprise while in Common Criteria mode, you can add it as a boolean that can be toggled off or on by the user.

Allow network ports

Splunk Enterprise supports Splunk Web and management ports in our policy. You can add rules to allow custom ports such as TCP, UDP etc. For more information, see Add custom policies.