Ivanti Device and Application Control (IDAC) App for Splunk
Ivanti Device and Application Control (IDAC) App for Splunk
The Ivanti Device and Application Control App for Splunk provides pre-built dashboards for IDAC data that is imported with the IDAC Add-on for Splunk.
The dashboards in this app expose both statistics and detailed views on all activities - blocks, shadowing, admin audit activity and agent updates.
Supported Versions of Ivanti Device and Application Control
- IDAC 5.3 (tested)
- Any version of IDAC that supports SIEM integration using adc_alp_[architecture].dll to either Windows event logs or flat file (.json) logs