All Apps and Add-ons

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

mtoups
New Member

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

0 Karma
1 Solution

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma

mtoups
New Member

So when the Threatconnect app is used without the ES license, it will still allow IoCs to be matched against logs and alerts brought up?

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.