blueteamvillage / DC31-obsidian-sec-eng

MIT License

1 stars 0 forks source link

fix: missing cribl to splunk rules, tcp/9997 and tcp/8088 #108

Closed juju4 closed 1 year ago

juju4 commented 1 year ago

Background

add missing network rules. those are already deployed/live.

Type of change

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update

Changes

terraform network rules between cribl and splunk, receiver tcp/9997, splunk hec tcp/8088 (last one allowing index split)

Testing

already live