Integration Forescout with Splunk ES

[bniroshan]

Hello,

Please let me know how to integrate Forescout with Splunk ES.

Thanks

[vikramyadav · Accepted solution]

Hi @bniroshan ,

You can use Forescout Add-on for Splunk to integrate. The Forescout Technology Add-on for Splunk is a required component to streamline data transfer between Forescout and Splunk Enterprise. It also maintains Forescout credentials for communications between Forescout and Splunk Enterprise.
https://splunkbase.splunk.com/app/3382/

By combining Forescout's complete enterprise-wide device visibility, rich contextual device and network properties data, and automated incident response capabilities with Splunk’s data correlation, analytics and incident management, security operations teams can dramatically reduce risk and increase operational efficiency by realizing numerous benefits.

Thanks.

--------------------------------------------------------

If this helps your like will be appreciated 😀

[khalidewaidah]

Hi . 

Dose this app work with forescout NAC 

[richgalloway]

Technically, one integrates data sources with Splunk Enterprise and then uses the ingested data within ES.

There are apps in splunkbase to help integrate Forescout.  Also, Forescout has a guide at https://www.forescout.com/platform/forescout-app-guide-splunk-2-7-0

[bniroshan]

Yes I got it and Thank you very much.

[bniroshan]

Thanks for the support.