Splunk Enterprise Security

adding Threat feed to Enterprise Security

sabaKhadivi
Path Finder

How Can I add  a subnet or CIDR to ip intel  threat intelligence lookup?

Labels (2)
Tags (1)

inventsekar
Super Champion

Hi @sabaKhadivi hope you resolved this issue.. if not, maybe, check this.. 

https://docs.splunk.com/Documentation/ES/6.3.0/Admin/Includedthreatintelsources

 

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!