All Apps and Add-ons
Highlighted

Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

Engager

Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

0 Karma
Highlighted

Re: Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

Communicator

As per details from Tanium website, you can do the integration with Syslog and send data to 514 port of Splunk.

I assume you already started and invested time with Tanium-Splunk integration, would suggest checking below-mentioned URL (which may be helpful with your integration)

https://docs.tanium.com/connect/connect/siem.html

0 Karma
Highlighted

Re: Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

Engager

Thank u for the response. I tried using tcp:9997 and it worked. 🙂

0 Karma