How to integrate openCTI with Splunk?

tuts · ‎06-05-2024

I want to link OpenCTI with Splunk ES to be on top of the threats

tuts · ‎06-10-2024

Is there another source that explains in detail how the settings are made in OPENCTI AND SPLUNK?

kiran_panchavat · ‎06-05-2024

@tuts Hey, please check this: https://github.com/OpenCTI-Platform/connectors/tree/master/stream/splunk

If this reply helps you, Karma would be appreciated.

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation

How to integrate openCTI with Splunk?

HTTP Event Collector

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...