All Apps and Add-ons

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

mtoups
New Member

Does the ThreatConnect app require the Splunk Enterprise instance to have a Enterprise Security license in order to work?

0 Karma
1 Solution

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma

gsopkoTC
Path Finder

No, the ThreatConnect App for Splunk does not require either Splunk Enterprise Security nor a license for Splunk Enterprise Security.

View solution in original post

0 Karma

mtoups
New Member

So when the Threatconnect app is used without the ES license, it will still allow IoCs to be matched against logs and alerts brought up?

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!