Incapsula integration - splunk cloud (free)

pzirkind · ‎02-22-2017

I'm wondering how to integrate Incapsula into splunk.

Currently Incapsula has a 'connector' file (some kind of .spl file), where does this file go? Does it get inputted online in splunk cloud, or
is this put on a server on our network.

I'm just not clear on the mechanics necessary to make this work.
Thanks in advance

O_Inc · ‎02-22-2017

You can use this simple script to get your logs from the API:
https://github.com/Incapsula/logs-downloader,You can just pull it from the API with a simple script:
https://github.com/Incapsula/logs-downloader

Incapsula integration - splunk cloud (free)

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Incapsula integration - splunk cloud (free)

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A