Getting Data In

Integrate FireEye logs in Enterprise Security

gcusello
SplunkTrust
SplunkTrust

Hi at all,

I have to configure an Enterprise Security and one of the sources is FireEye.

I found in Splunkbase an Add-on CIM 4.x compliant that seems to be the correct one but I found that it was archived!

Does anyone know why it's archived and if I can use it (or it's better to choose another one) on Splunk 8.1.1 and ES 4.6.1?

Thanks.

Ciao.

Giuseppe

Tags (3)
0 Karma
Get Updates on the Splunk Community!

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...

What’s New in Splunk Observability Cloud: January Feature Highlights & Deep Dives

Splunk Observability Cloud continues to evolve, empowering engineering and operations teams with advanced ...