All Apps and Add-ons
Highlighted

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

New Member

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

0 Karma
Highlighted

Re: Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma
Highlighted

Re: Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

New Member

So when the Threatconnect app is used without the ES license, it will still allow IoCs to be matched against logs and alerts brought up?

0 Karma