Integrate Splunk with RSA Archer

[sondua12]

How can i intgetrate SPlunk With RSA Archer. Which app/ process can help me to accomplish i?
Regards,
Sonia

[nithin_shubhana]

Now Integration between Splunk and RSA Archer is available. You can make use of the RSA Security Operations Solutions solution to integrate Splunk and RSA Archer.

Records will be created in the Security Incidents, Security alerts application in RSA Archer.

RSA Archer Security Operations Management helps you do the following:
a>Prioritize and respond faster to security incidents by leveraging business context and actionable threat intelligence.
b>Engage key business and IT stakeholders in the incident management process
c>Simplify incident investigation and breach response procedures through industry best practice methodologies and response procedures.
d>Optimize SOC investments through SOC KPI (key performance indicators)monitoring and staff time management tracking.

Also customers can make use of the Devices application present in the Enterprise management solution to add more business context for the devices, mention the criticality of the device, link the device to the Business Unit and have full fledged enterprise solution integrated with RSA SecOps solution.

More information about the integration can be found in the following link:
https://community.emc.com/docs/DOC-36270

To know more about RSA Security Operations Management solution refer to the following link:
https://community.emc.com/docs/DOC-39988

Regards,
Nithin Shubhananda

[danglim]

Does anyone have access tot he docs that was posted?

[monteirolopes]

Did you get the document? Is it possible to share?

[michael_daoust]

has anyone been able to get access to and view the integration document?

I am unable to view the integration document also, I receive a restricted message. Can we get an updated location or make the document accessible?

[rachanakalkod]

Hi Nithin,

I need documents on Integration of Archer with Splunk.

Requesting you to share the documents and i am a member of Archer Community in the name of Rachana

Regards,
Rachana

[jhritz]

Hi Nithin -

I see that you reposted your write up from your other response to this thread. Do you actually have access to the documents from this link https://community.emc.com/docs/DOC-36270 ?

Both documents are listed as private and my attempts to get these files from EMC have been unsuccessful. Without these documents or a more detailed description of this integration, the original question is still not being addressed fully.

Best,

Josh

[nithin_shubhana]

Hi Josh,
Are you member of the Archer Exchange member/Archer community? If yes, kindly provide your name and the handle.

Regards,
Nithin

[srami]

Hi Nithin,

I am looking for the Splunk-Archer integration documents you mentioned above. Can you please share those with me? I am not a member of Archer community.
Thank you,

[jhritz]

This question was answered previously here http://answers.splunk.com/answers/134134/integrate-with-rsa-archer.html

Hope that helps.