{"added":null,"apiVersion":1,"behindSince":null,"buildDepends":[],"categories":["python","textproc"],"comment":"Evtx to Splunk ingestor","compare":null,"dependentCount":null,"description":"Ingest EVTX files into a Splunk instance.\n\nThis tool is based on the work of :\n\nOmer BenAmram\nBlardy\nThanks to Ekto for its contribution.\n\nKey features:\n\n- Splunk HEC support with token auto-creation\n- Splunk index auto-creation\n- Multiprocessing support\n- Caching for evtx reuse without reconverting\n- Windows and Linux compatibility\n- Rely on the great and fast evtx_dump Rust tool of Omer\n- Evtx message resolutions from database\n\nNote: evtx2splunk converts the EVTX to JSON and stores them in a temporary\nplace. Hence, up to the size of source EVTX can be created during the process.\nThese files are removed at the end of the process, except if keep_cache is\nenabled.","flavors":[],"html":"https://daemonports.org/dragonfly/textproc/py-evtx2splunk/","kind":"port","lastUpdate":null,"license":["MIT"],"licenses":["MIT"],"maintainer":"acm@FreeBSD.org","name":"py312-evtx2splunk","newest":true,"newestVersion":"2.0.1","noVulnData":false,"origin":"textproc/py-evtx2splunk","otherSystems":[{"maintainer":"acm@FreeBSD.org","newest":true,"origin":"textproc/py-evtx2splunk","path":"/textproc/py-evtx2splunk/","system":"FreeBSD","version":"2.0.1_1"},{"maintainer":"acm@FreeBSD.org","newest":true,"noVulnData":true,"origin":"textproc/py-evtx2splunk","path":"","system":"HardenedBSD","version":"2.0.1_1"},{"maintainer":"acm@FreeBSD.org","newest":true,"noVulnData":true,"origin":"textproc/py-evtx2splunk","path":"","system":"GhostBSD","version":"2.0.1_1"}],"packages":null,"pkgName":"py312-evtx2splunk-2.0.1_1","related":null,"repository":"DPorts","requiredBy":["security/py-iris-evtx-module"],"requiredByCount":1,"runDepends":["devel/py-semantic-version","dns/py-idna","lang/python312","misc/py-tqdm","net/py-urllib3","security/py-certifi","sysutils/fd","textproc/evtx","textproc/py-chardet","textproc/py-splunk-hec","textproc/py-toml","www/py-python-dotenv","www/py-requests"],"status":null,"system":"dragonfly","systemLabel":"DragonFly","version":"2.0.1_1","versions":[{"date":"2026-11-11","version":"2.0.1"}],"vulnerabilities":null,"www":"https://github.com/whikernel/evtx2splunk"}
