All Apps and Add-ons

Imperva AppSecurity View SplunkCloud: what index should have incapsula log data sent to?

half_baked
Engager

Hi, for running Imperva AppSecurity View on SplunkCloud, what index should have Incapsula log data sent to? Also, from dashboards it looks like it's expecting sourcetype=imperva_incapsula_cef, correct? I didn't see any configuration value where I could set the index for this app to use.

Thanks!

HB

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...