All Apps and Add-ons

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

mtoups
New Member

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

0 Karma
1 Solution

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

0 Karma

mtoups
New Member

So when the Threatconnect app is used without the ES license, it will still allow IoCs to be matched against logs and alerts brought up?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...