How to integrate openCTI with Splunk?

tuts · ‎06-05-2024

I want to link OpenCTI with Splunk ES to be on top of the threats

tuts · ‎06-10-2024

Is there another source that explains in detail how the settings are made in OPENCTI AND SPLUNK?

kiran_panchavat · ‎06-05-2024

@tuts Hey, please check this: https://github.com/OpenCTI-Platform/connectors/tree/master/stream/splunk

If this reply helps you, Karma would be appreciated.

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Data Management Digest – August 2026

Join the Conversation

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Data Management Digest – August 2026