How to integrate openCTI with Splunk?

tuts · ‎06-05-2024

I want to link OpenCTI with Splunk ES to be on top of the threats

tuts · ‎06-10-2024

Is there another source that explains in detail how the settings are made in OPENCTI AND SPLUNK?

kiran_panchavat · ‎06-05-2024

@tuts Hey, please check this: https://github.com/OpenCTI-Platform/connectors/tree/master/stream/splunk

If this reply helps you, Karma would be appreciated.

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Join the Conversation

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas