Veeam parser

[marakji-splunk]

What is the sc4s version? 3.26.1 Is there a pcap available? If so, would you prefer to attach it to this issue or send it to Splunk support? Happy to provide the logs through a support case. What the vendor name? Veeam What's the product name? Veeam If you're requesting support for a new vendor, do you have any preferences regarding the default index and sourcetype for their events? veeam_vbr_syslog Do you have syslog documentation or a manual for that device?? Not much, but I have the app from the vendor, which already parses the data that we need. https://splunkbase.splunk.com/app/7312 Feature Request description: Veeam is a common solution used by our customers, and often requires integration with Splunk for operational monitoring. An app was already developed in Splunk base by the Vendor. The extractions required can be found in the app. Would be great if we could have the parser available for this. Do you want to have it for local usage or prepare a github PR?