Assistence Needed ! Forwarding logs from Security Onion VM to Parent OS(ubuntu 16) splunk

[Yakeshraj Madhivanan]

Hi Everyone,

For study purpose i have deployed security onion in virtualbox and i'm able to monitor the logs in that vm. Now i wanted to forward the logs to parent os (ubuntu) where i have installed splunk.. I have tried universal forwarder for doing so but i couldn't succeed.. forwarding server always remains inative.
Kindly guide me for forwarding snort logs from security onion vm to parent os splunk..

[Wes Lambert]

How is you virtual networking setup?  What kind of interface is being used?  Bridged/NAT/Host Only?

Thanks,

Wes

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.

--

https://twitter.com/therealwlambert

https://securityonion.net/

[Yakeshraj Madhivanan]

hi Wes..

Yes.. Its been bridged..

[Wes Lambert]

Have you checked basic connectivity between the boxes?  Are you able to ssh, etc. between the two machines?

Also see:

https://github.com/Security-Onion-Solutions/security-onion/wiki/ThirdPartyIntegration#how-do-i-send-ids-alerts-to-an-external-system

Thanks,

Wes

On Thu, Apr 26, 2018 at 2:09 AM, Yakeshraj Madhivanan <vsssr...@gmail.com> wrote:

hi Wes..

Yes.. Its been bridged..

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.