splunk
Proofpoint - ET Splunk TA
This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
The ET Splunk Technical Add-on (ET-TA) seamlessly integrates the acclaimed Emerging Threats Intelligence feed into Splunk, and provides predefined macros and lookups to enrich and search any log that Splunk can parse with ET Intelligence reputation data. The ET-TA installs in seconds, and empowers the Splunk admin to create custom searches, dashboards, panels, pivots, reports, and alerts enriched with ET intelligence data.
Features:
• Automatically Downloads, Installs, and Updates ET Intelligence reputation data.
• Predefined Macros and Lookups to enrich any log containing IP/Domain fields that Splunk can parse with ET reputation data.
• Support for Splunk Search, Dashboard, Panels, Pivots, Reports, and Alerts leveraging ET reputation data.
Features:
• Automatically Downloads, Installs, and Updates ET Intelligence reputation data.
• Predefined Macros and Lookups to enrich any log containing IP/Domain fields that Splunk can parse with ET reputation data.
• Support for Splunk Search, Dashboard, Panels, Pivots, Reports, and Alerts leveraging ET reputation data.
Release Notes
Version 1.0.2
Oct. 5, 2015
Version 1.0.1
Oct. 1, 2015
Version 1.0
Oct. 1, 2015