How to get SafeNet Trusted Access(STA) logs to Splunk cloud?

[mthirumalareddy]

Hi All,

We use SafeNet Trusted Access(STA) as our identity provider and we would like to pull the logs from STA to Splunk Cloud. I don't see any app for this integration. Can some one point how to integrate and configure it? 

Thanks In Advance!

[Roy_9]

@mthirumalareddy hello,

you can leverage UF approach incase if these logs are writing to a file so that you can monitor it using UF.

If STA supports https, you can stream it via HEC

If both the above options doesn't work, you can build a custom add-on if it supports REST api using Splunk add-on builder.