Splunk Technology Add-on
TA-devfleet
Device inventory
Free for personal use · commercial license required
Security
pciutils · usbutils · dmidecode
Why TA-devfleet exists
Unplanned USB devices are a tamper and data-exfil path, and asset serials always disagree with the spreadsheet. TA-devfleet records device events and authoritative serials per host.
What it collects
- USB/PCI attach and detach events
- dmidecode asset serials
- Unknown-device alerts
Runs on stock tools
No daemons, no agents, no exotic collectors - it shells out to well-known CLIs or reads sysfs, and parses the result into Splunk events.
External tools used: pciutils · usbutils · dmidecode.