test Splunk

Author: Aif4thah

README.md

@@ -137,9 +137,15 @@ curl -k https://127.0.0.1:3000
 
 ## 🛠️ Debug 
 
-### 401 Unauthorized 
+### Dotnet install on Linux 
 
-Your first request may return a 401 code due to unsuccessful authentication. It's ok, Start Hacking !
+Ubuntu / Debian exemple
+
+```bash
+wget https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
+dpkg -i packages-microsoft-prod.deb
+apt update && apt install -y dotnet-sdk-8.0 dotnet-runtime-8.0
+```
 
 ### Dotnet Framework
 
@@ -151,17 +157,6 @@ dotnet --version
 dotnet --list-sdks
 ```
 
-### Dotnet on Linux 
-
-Ubuntu / Debian exemple
-
-```bash
-wget https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
-dpkg -i packages-microsoft-prod.deb
-apt update && apt install -y dotnet-sdk-8.0 dotnet-runtime-8.0
-```
-
-
 ### Certificates
 
 To trust the certificate
@@ -179,9 +174,6 @@ dependancies have to be dowloaded from [standard sources](https://go.microsoft.c
 dotnet nuget add source "https://api.nuget.org/v3/index.json" --name "Microsoft"
 ```
 
-### Misc
-
-* Be aware that VLA runs Linux and MacOS, but is only tested and supported on Windows.
 
 ## 💜 Crédits
 

nlog.config

@@ -3,6 +3,7 @@
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
 
   <targets>
+
     <!-- log au format texte -->
     <target name="allfile" xsi:type="File"
             fileName="${shortdate}_logfile.txt"/>
@@ -19,7 +20,21 @@
     </target>
 
     <!-- logs en console -->
-    <target name="logconsole" xsi:type="Console" />  
+    <target name="logconsole" xsi:type="Console" />
+
+    <!-- SIEM Splunk -->
+    <target name="splunk" xsi:type="Http" method="Post"
+        url="http://localhost:8088/services/collector"
+        headers="Authorization=Splunk YOUR_TOKEN"
+        encoding="utf-8"
+        contentType="application/json">
+    <layout xsi:type="JsonLayout">
+      <attribute name="event" layout="${message}" />
+      <attribute name="level" layout="${level}" />
+      <attribute name="timestamp" layout="${date}" />
+    </layout>
+  </target>
+  
 
   </targets>