Data Source: CrushFTP

Date: 2025-01-23

ID: 8a42ace5-e4c8-4653-80cf-1b8e7e6024ef

Author: Patrick Bareiss, Splunk

Description

Logs activities related to file transfers and user interactions in CrushFTP, including file uploads, downloads, user authentication, and session details.

Details

Property	Value
Source	`crushftp`
Sourcetype	`crushftp:sessionlogs`

Event Fields

+ Fields

  <span class="pill kill-chain">_time</span>
  
  <span class="pill kill-chain">_raw</span>
  
</div>

Example Log

1SESSION|05/14/2024 17:36:21.859|[HTTPS:169_52326_sMa:anonymous:10.0.1.30] READ: *POST /WebInterface/function/?c2f=CmF1&command=zip&path=%3CINCLUDE%3Eusers/MainUsers/groups.XML%3C/INCLUDE%3E&names=/a HTTP/1.1*

Source: GitHub | Version: 2