I need a Splunk alert to detect firewall failures. I figured out windows firewall failures from the relevant event codes like 5025, 5027...etc.

I'm not able to find any way to detect *nix firewall failures.

Can somebody point to the right documentation, OR give me the log samples for firewall failures in *nix devices?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.