BSD Portstextproc/py-evtx2splunk 2.0.1_1 DragonFly
Evtx to Splunk ingestor
- System
- DragonFly
- Repository
- DPorts
- Maintainer
- [email protected] (as in FreeBSD)
- License
- MIT
- Categories
- python, textproc
- Package size
- 23.7 KiB, 106.5 KiB installed
Description
Ingest EVTX files into a Splunk instance.
This tool is based on the work of :
Omer BenAmram Blardy Thanks to Ekto for its contribution.
Key features:
- Splunk HEC support with token auto-creation
- Splunk index auto-creation
- Multiprocessing support
- Caching for evtx reuse without reconverting
- Windows and Linux compatibility
- Rely on the great and fast evtx_dump Rust tool of Omer
- Evtx message resolutions from database
Note: evtx2splunk converts the EVTX to JSON and stores them in a temporary place. Hence, up to the size of source EVTX can be created during the process. These files are removed at the end of the process, except if keep_cache is enabled.
In the other systems
The newest version among them is 2.0.1, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| DragonFly | textproc/py-evtx2splunk | 2.0.1_1 newest | none known | - | [email protected] | - |
| FreeBSD | textproc/py-evtx2splunk | 2.0.1_1 newest | none known | - | [email protected] | - |
| HardenedBSD | textproc/py-evtx2splunk | 2.0.1_1 newest | no data | - | [email protected] | - |
| GhostBSD | textproc/py-evtx2splunk | 2.0.1_1 newest | no data | - | [email protected] | - |
Version history 1
- 2.0.1
Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.
Install
Binary package:
pkg install py312-evtx2splunkFrom DPorts:
cd /usr/dports/textproc/py-evtx2splunk && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.