Getting Data In

How to ingest Security Hub log into Splunk- apart from HEC method

VijaySrrie
Builder

Hi,

How to ingest Security Hub logs to splunk without using HEC token, do we have any Add-on? to ingest Security Hub logs to splunk?

GuardDuty will be integrated into Security Hub first then sent out from security hub together with other events into splunk.

 

Thanks,

Vijay Sri S

Labels (1)
0 Karma

VijaySrrie
Builder

@gcusello  do you have the steps to configure the app?

I have installed the app but not sure on further steps. The steps provided in the installation page is not clear

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @VijaySrrie,

did you tried to use AWS Security Hub App (https://splunkbase.splunk.com/app/5767/)?

It's a Splunk supported App, so you can also open a case to Splunk.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...