If I remember correctly, it was only for the 3.x version of Splunk, and hasn't yet been ported to the latest version - though I haven't checked recently.
JM On 12/31/2009, Dave S <[email protected]> wrote: > I've also been testing Splunk these past few days. I read on the > OSSEC web site > <http://www.ossec.net/wiki/OSSEC_&_Splunk> > about an app for Splunk that reads OSSEC agent data into its database, > but I can't find it anywhere in the Splunk "App Store", yet it still > pops up in searches when you google for "splunk ossec". > > Is it no longer supported? > -- Sent from my mobile device
