Trend Micro Cloud once integration with Splunk

[Gk7]

Hello Folks,

Good Morning to one and all,

I have Trend Micro Cloud one service, and i want to integrate those service with Splunk instance which has been placed on cloud.

Kindly suggest the mechanism for this, as i have checked there is no add on available for this.

As i know trend Micro Cloud one have the ability to forward the logs via Syslog mechanism & the Splunk instance on cloud, then what will be the Splunk interface for syslog on cloud for this integration.

Please share your opinion on this.

Regards,

Gautam Khillare(GK)

[Gk7]

Hey @kelstahl8705 ,

thanks...Much appreciated.

[kelstahl8705]

Hi Gautam 🙂

My company uses a few Trend Micro products and let me tell you the data ingestion can be a JOURNEY! I did remember in my struggle to get XDR data in that I saw documentation from Trend Micro on sending data to syslog. 

Connect to Splunk - Network Security | Trend Micro Cloud One™ Documentation

I hope this helps out or at least gets ya started in the right direction 🙂

Good Luck!
Kelly