Splunk Enterprise Security

Splunk App for Enterprise Security: Where is the threatlist stored?

Explorer

Hello,

Retrieving the threatlist through the URL in Enterprise Security, I would like to know if is stored in csv.

0 Karma

Splunk Employee
Splunk Employee

Hello,

have a look in the /opt/splunk/etc/apps/SA-ThreatIntelligence/lookups directory.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!