Splunk Enterprise Security
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

adding Threat feed to Enterprise Security

sabaKhadivi
Path Finder
‎10-19-2020 11:17 AM

How Can I add  a subnet or CIDR to ip intel  threat intelligence lookup?

Labels (2)
Tags (1)
Reply

inventsekar
SplunkTrust
SplunkTrust
‎11-02-2020 06:09 AM

Hi @sabaKhadivi hope you resolved this issue.. if not, maybe, check this.. 

https://docs.splunk.com/Documentation/ES/6.3.0/Admin/Includedthreatintelsources

 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Reply
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...

Buttercup Games: Further Dashboarding Techniques (Part 6)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...