How do I add TrendMicro to Splunk?

[cpetedocx]

I was able to download the splunk trendmicro deep security, but wasn't able to utilize it. I downloaded the Home | Splunk 7.2.1 but couldn't put the trend micro app in there.

[hijacob]

Hi!

You can install the app via GUI (Apps/Manage Apps/Install App) or by CLI. For Linux/Unix have a look at https://github.com/deep-security/splunk.

Greetings,
Jacob

[kmorris_splunk]

You can install the app through the GUI: Apps...Manage Apps...Install App from file. Or you can unzip it in $SPLUNK_HOME/etc/apps/ directory.

[sloshburch]

Building on that, instructions for app installation is generally documented at https://docs.splunk.com/Documentation/AddOns/released/Overview/Singleserverinstall

It sounds like you downloaded Splunk Enterprise 7.2.1. You should then be able to download and install the TrendMicro app on top of that.