https://community.splunk.com/t5/Security/dedicated-threat-intel-feed/m-p/693519#M18003 <P>Hello&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/101609">@heskez</a>&nbsp;Yes it's possible. You can have a custom lookup popped-up and integrate the same local intel -&nbsp;<A href="https://docs.splunk.com/Documentation/ES/7.3.2/Admin/Addlocalthreatintel" target="_blank">https://docs.splunk.com/Documentation/ES/7.3.2/Admin/Addlocalthreatintel</A></P><P>&nbsp;</P><P>Please hit Karma, if this helps!</P> Tue, 16 Jul 2024 18:45:14 GMT meetmshah 2024-07-16T18:45:14Z https://community.splunk.com/t5/Security/dedicated-threat-intel-feed/m-p/693446#M18002 <P>Hi there, I'd like to have a dedicated threat intel feed which goes to a custom created lookup (non-default), is that even possible?&nbsp;</P><P>&nbsp;</P> Tue, 16 Jul 2024 08:55:45 GMT https://community.splunk.com/t5/Security/dedicated-threat-intel-feed/m-p/693446#M18002 heskez 2024-07-16T08:55:45Z https://community.splunk.com/t5/Security/dedicated-threat-intel-feed/m-p/693519#M18003 <P>Hello&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/101609">@heskez</a>&nbsp;Yes it's possible. You can have a custom lookup popped-up and integrate the same local intel -&nbsp;<A href="https://docs.splunk.com/Documentation/ES/7.3.2/Admin/Addlocalthreatintel" target="_blank">https://docs.splunk.com/Documentation/ES/7.3.2/Admin/Addlocalthreatintel</A></P><P>&nbsp;</P><P>Please hit Karma, if this helps!</P> Tue, 16 Jul 2024 18:45:14 GMT https://community.splunk.com/t5/Security/dedicated-threat-intel-feed/m-p/693519#M18003 meetmshah 2024-07-16T18:45:14Z