This is a python program that tackles sending JSON data to a SIEM system, with Splunk being the SIEM of choice.
In your terminal or command prompt, run the following command:
git clone https://github.com/NicholasLindner/SendToSIEM.git
cd SendToSIEM
pip install requests
For Windows, run the program using the following command:
python send_data_to_siem_system.py
For Mac or Linux, run:
python3 send_data_to_siem_system.py
-
Enter your JSON Data
-
Enter your SIEM URL
Example for Splunk:
https://prd-p-abcde.splunkcloud.com:8088/services/collector/event
-
Enter SIEM Token
Step 1: Clone the Repository In your terminal or command prompt, run the following command:
git clone https://github.com/NicholasLindner/SendToSIEM.git