https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590128#M103416 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/164779">@VijaySrrie</a>,</P><P>did you tried to use AWS Security Hub App (<A href="https://splunkbase.splunk.com/app/5767/" target="_blank">https://splunkbase.splunk.com/app/5767/</A>)?</P><P>It's a Splunk supported App, so you can also open a case to Splunk.</P><P>Ciao.</P><P>Giuseppe</P> Tue, 22 Mar 2022 06:49:19 GMT gcusello 2022-03-22T06:49:19Z https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590126#M103415 <P>Hi,</P> <P>How to ingest Security Hub logs to splunk without using HEC token, do we have any Add-on? to ingest Security Hub logs to splunk?</P> <P>GuardDuty will be integrated into Security Hub first then sent out from security hub together with other events into splunk.</P> <P>&nbsp;</P> <P>Thanks,</P> <P>Vijay Sri S</P> Tue, 22 Mar 2022 09:06:38 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590126#M103415 VijaySrrie 2022-03-22T09:06:38Z https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590128#M103416 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/164779">@VijaySrrie</a>,</P><P>did you tried to use AWS Security Hub App (<A href="https://splunkbase.splunk.com/app/5767/" target="_blank">https://splunkbase.splunk.com/app/5767/</A>)?</P><P>It's a Splunk supported App, so you can also open a case to Splunk.</P><P>Ciao.</P><P>Giuseppe</P> Tue, 22 Mar 2022 06:49:19 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590128#M103416 gcusello 2022-03-22T06:49:19Z https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590160#M103423 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp; do you have the steps to configure the app?</P><P>I have installed the app but not sure on further steps. The steps provided in the installation page is not clear</P> Tue, 22 Mar 2022 08:56:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590160#M103423 VijaySrrie 2022-03-22T08:56:18Z https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590173#M103425 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/164779">@VijaySrrie</a>,</P><P>No sorry I didn't used it, here you can find some docs</P><P><A href="https://www.splunk.com/en_us/form/stay-afloat-using-aws-security-hub.html" target="_blank">https://www.splunk.com/en_us/form/stay-afloat-using-aws-security-hub.html</A></P><P><A href="https://www.youtube.com/watch?v=7pd2PLMVqrA" target="_blank">https://www.youtube.com/watch?v=7pd2PLMVqrA</A></P><P><A href="https://github.com/splunk/splunk-for-securityHub" target="_blank">https://github.com/splunk/splunk-for-securityHub</A></P><P><A href="https://pages.awscloud.com/rs/112-TZM-766/images/Global_PTNR_AWS_Splunk_Ebook_09252019.pdf" target="_blank">https://pages.awscloud.com/rs/112-TZM-766/images/Global_PTNR_AWS_Splunk_Ebook_09252019.pdf</A></P><P>Ciao.</P><P>Giuseppe</P> Tue, 22 Mar 2022 09:49:20 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-ingest-Security-Hub-log-into-Splunk-apart-from-HEC-method/m-p/590173#M103425 gcusello 2022-03-22T09:49:20Z