topic Re: FISMA for Splunk in All Apps and Add-ons

Is there any documentation on FISMA for Splunk?

conoversj — Thu, 17 Mar 2022 19:16:16 GMT

Is there any documentation out there that will show me how NIST 800-53 requirements are satisfied individually with the FISMA app?

Re: FISMA for Splunk

cowboyit — Wed, 24 Oct 2012 21:25:59 GMT

I believe the Splunk FISMA app was designed at this time to pass baseline requirements meaning they validate in the low categories of the FISMA scale of each of the controls. I know if you go to any of the controls... example >> investigate a control > PS personal security > PS-4 Personnel Termination > go down to the bottom of the page and select arrow next to Control Details. The FISMA explanation comes up that the auditor or the IA officer can read to understand the details of the metrics for the displayed or printed report. Hope this helps out and that I understood your question ok.

Re: FISMA for Splunk

conoversj — Wed, 24 Oct 2012 21:45:21 GMT

I need documentation on what specific piece of the FISMA app will do say AU-8. Is there something out there that describes that?

Re: FISMA for Splunk

conoversj — Wed, 24 Oct 2012 21:47:56 GMT

I need documentation on what specific piece of the FISMA app will do say AU-8. Is there something out there that describes that?

Re: FISMA for Splunk

splunksurekha — Thu, 17 Sep 2015 10:36:29 GMT

Installed splunk app for FISMA on my splunk version 6.2.2

Steps i followed:
1) installed fisma app and deployed it in search head.
2) then deployed the same FISMA app folder to all indexers.
3) But Account Management Trends & Account Management Signatures doesn't show up any data in the dashboard
4) Other dashboards also doesn't collect any data like Audit, Logins, Malware, Network, Updates, Vulnerabilities.

Please let me know if i have to do any further configuration.

Re: FISMA for Splunk

diptij — Thu, 17 Mar 2022 19:00:12 GMT

What URL provides this App?