Imperva WAF Data
App Installation
| App | Search Head | Indexer | Heavy Forwarder | UF / Deployment Server | Additional Details |
|---|---|---|---|---|---|
| Splunk Add-on for Imperva SecureSphere WAF | Required | - | Required | - | Installation and Configuration Guide |
Important sourcetypes to be collected
- imperva:waf
Note : Create an index named imperva_waf or update the cs_imperva_waf macro definition from Cyences app configuration page (Cyences Settings > Cyences App Configuration > Products Setup).
Estimated Data Size
- Licensing: less than 100 MB (daily for WAF audit logs)