## About
- This TA is written for use within Splunk 9.x
- It is intended to be used with Netgear business grade switches
- See Vendor: [Netgear](https://www.netgear.com/uk/business/wired/switches/smart/)
- I publish this as an individual within the cyber security community, it is not an official release from the vendor.

## Tested hardware:
- Netgear MS510TXPP
- Netgear GS748T (Under development)

## Splunkbase:
- First listed as of 2024-04-19
- https://splunkbase.splunk.com/app/7317

## Setup
- This is the 'TA' which should be installed on your UF, HF, IDX and SH
- inputs.conf, this is an example to help novice administrators
- props.conf, is the key useful file that has the Great8 applied. 

### Sourcetype:
- This app uses the following sourcetype, you may wish to adapt, just ensure to be consistent.
[netgear:switch:syslog]

## Git:
- See [Github](https://github.com/jameswintermute/TA_Netgear-switch)
- feedback to 'jameswintermute 0x40 protonmail.ch' OR Mastodon: [email protected]

## CIM compliance:
- It is CIM compliant against the 'Network Traffic, Authentication' Datamodels.