Web Data Sources
| Name | Platform | Sourcetype | Source | Supported TA | Date |
|---|---|---|---|---|---|
| Apache Access Log | Web | apache:access:combined | /var/log/apache2/access.log | Splunk Add-on for Apache Web Server | |
| Apache Error Log | Web | apache:error | /var/log/apache2/error.log | Splunk Add-on for Apache Web Server | |
| Zeek HTTP | Web | zeek:http | http.log | TA for Zeek | |
| Nginx Error Log | Web | nginx:plus:error | /var/log/nginx/error.log | Splunk Add-on for NGINX | |
| G Suite Gmail | Web | gsuite:gmail:bigquery | http:gsuite | Splunk Add-on for Google Workspace | |
| Splunk Stream HTTP | Web | stream:http | stream:http | Splunk Add-on for Stream Wire Data | |
| Bro http | Web | bro:http:json | bro:http:json | TA for Zeek | |
| Nginx Access | Web | nginx:plus:kv | /var/log/nginx/access.log | Splunk Add-on for NGINX | |
| G Suite Drive | Web | gsuite:drive:json | http:gsuite | Splunk Add-on for Google Workspace | |
| GitHub Enterprise Audit Logs | Web | httpevent | http:github | Splunk Add-on for Github |