Is it possible to import AlienVault OTX data to Splunk in easy way?

[AlexeySh]

Hello,

I’d like to enrich a Splunk ES Threat Intel database and I'm trying to find an easy way to import AlienVault Open Threat Exchange (OTX) data to Splunk. Could anyone give me an advice please?

Thanks for the help.

Regards,
Alex.

[dbroggy]

you mean this?
https://splunkbase.splunk.com/app/4336/#/details

[astatrial]

Did you managed to do it ?
I also have issues with adding this taxii feeds to the ES.

[AlexeySh]

No, unfortunately I did not 😞

[astatrial]

So frustrating

[GenericSplunkUs]

In for wanting this answered.

[woodcock]

W*h*a*t?