Splunk Enterprise Security

DHS AIS and CISCP taxii feeds - setup

robert_miller
Path Finder

Has anyone been able to configure the taxii feeds for AIS and CISCP in Enterprise Security? In the arguments, I have to provide a cert_file and key_file. DHS already provided me with their certs, but I am not certain how to put it all together.

0 Karma

jimmytpowers
Path Finder

Were you ever able to get success with DHS TAXII feeds?

0 Karma

robert_miller
Path Finder

I could never get it to work. I ended up having to use the FLAREclient.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...