Parsing and sending in OPNSense Syslog, Suricata, and Firewall logs to Splunk and Microsoft Sentinel for threat hunting and DFIR

Using all free applications to send in OPNSense Syslog, Suricata, and Firewall logs into CRIBL Stream to reduce log size for cost reduction and then sending to Sentinel and Splunk



https://medium.com/@truvis.thornton/sending-opnsense-firewall-logs-into-cribl-stream-with-geo-ip-tagging-with-log-source-splitting-99dc6a057eaa

applications blueteamsec cost cribl dfir firewall free hunting log logs microsoft microsoft sentinel opnsense parsing send sentinel size splunk stream suricata syslog threat threat hunting