How to integrate threat intel platform in splunk (OpenCTI)

[splk_user]

Hi!

i want to integrate OpenCTI intel feeds to splunk and i don't find any Add-on for this integration .

OpenCTI provide a connector for this connection but what is the configuration that i need to provide in splunk to receive the feeds .

Can you Please suggest if there is any specific guide for how to do this with opencti ;

Thank you

[caiosalonso]

Hi @splk_user,

Could you please provide the link to the connector?

Also, do you want to integrate the intel feeds to Spunk Core or to Splunk Enterprise Security?