Ingesting AlienVault OTX feed service with Splunk?

mitzkowitz_splu · ‎10-16-2015

Someone recently asked me how they could tie Splunk in with the free AlientVault OTX feed service. Has anyone ever done this and can they provide the dance steps?

THANKS!

shashilendra · ‎12-17-2020

Above url is not working , could someone tell the step to integrate

korstiaan · ‎10-29-2015

Would be interested in the integration as well I found this through goole:
https://www.elance.com/samples/alienvault-otx-app-splunk-alienvault-otx-open-threat-exchange-splunk-...
You can check the github repo that is mentioned in the article I am not sure if this still works.

Ingesting AlienVault OTX feed service with Splunk?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Ingesting AlienVault OTX feed service with Splunk?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A