BSD Portstextproc/py-evtx2splunk 2.0.1_1 FreeBSD
Evtx to Splunk ingestor
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- MIT
- Categories
- textproc, python
- Package size
- 24.9 KiB, 106.5 KiB installed
Description
Ingest EVTX files into a Splunk instance.
This tool is based on the work of :
Omer BenAmram Blardy Thanks to Ekto for its contribution.
Key features:
- Splunk HEC support with token auto-creation
- Splunk index auto-creation
- Multiprocessing support
- Caching for evtx reuse without reconverting
- Windows and Linux compatibility
- Rely on the great and fast evtx_dump Rust tool of Omer
- Evtx message resolutions from database
Note: evtx2splunk converts the EVTX to JSON and stores them in a temporary place. Hence, up to the size of source EVTX can be created during the process. These files are removed at the end of the process, except if keep_cache is enabled.
Install
Binary package:
pkg install py312-evtx2splunkFrom the ports tree:
cd /usr/ports/textproc/py-evtx2splunk/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= py312-evtx2splunk>0:textproc/py-evtx2splunkPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 2.0.1_1 | 2.0.1_1 | - | 2.0.1_1 | - |
| FreeBSD:14:quarterly | 2.0.1_1 | 2.0.1_1 | n/a | 2.0.1_1 | - |
| FreeBSD:15:latest | 2.0.1_1 | 2.0.1_1 | n/a | 2.0.1_1 | 2.0.1_1 |
| FreeBSD:15:quarterly | 2.0.1_1 | 2.0.1_1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 2.0.1_1 | 2.0.1_1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Runtime 12
${PYTHON_PKGNAMEPREFIX}certifi>0: security/py-certifi${PYTHON_PKGNAMEPREFIX}chardet>0: textproc/py-chardet${PYTHON_PKGNAMEPREFIX}idna>0: dns/py-idna${PYTHON_PKGNAMEPREFIX}python-dotenv>0: www/py-python-dotenv${PYTHON_PKGNAMEPREFIX}requests>0: www/py-requests${PYTHON_PKGNAMEPREFIX}semantic-version>0: devel/py-semantic-version${PYTHON_PKGNAMEPREFIX}urllib3>0: net/py-urllib3${PYTHON_PKGNAMEPREFIX}toml>0: textproc/py-toml${PYTHON_PKGNAMEPREFIX}tqdm>0: misc/py-tqdm${PYTHON_PKGNAMEPREFIX}splunk-hec>0: textproc/py-splunk-hecfd-find>0: sysutils/fdevtx>0: textproc/evtx
The full lists below include those, and their dependencies in turn.
Build dependencies 11
Run dependencies 22
- devel/gettext-runtime
- devel/libffi
- devel/py-click
- devel/py-semantic-version
- devel/readline
- dns/py-idna
- lang/python312
- math/mpdecimal
- misc/py-tqdm
- net/py-pysocks
- net/py-urllib3
- print/indexinfo
- security/py-certifi
- sysutils/fd
- textproc/evtx
- textproc/expat2
- textproc/py-chardet
- textproc/py-charset-normalizer
- textproc/py-splunk-hec
- textproc/py-toml
- www/py-python-dotenv
- www/py-requests
Required by 1
Configuration
No options to configure.
- USES
- python
- Service scripts
- none
Files
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| whikernel-evtx2splunk-2.0.1-12bfda6cdd83ae392df9303d0140a2eaa936a62f_GH0.tar.gz | 7.116809e+06 | a203a63d063d004975ac5d928030188501e119bc63dc6f995644f9aa1577a36c |
Commit history 0
No commits in the history this site was built from.