Projects Splunk

Reusable Splunk apps for data ingestion, enrichment, alert automation, and operational visibility.

4 entries

struxureware

Periodically retrieves StruxureWare data for Splunk ingestion.

Why Automates collection of operational data so it is available for analysis and monitoring.

snapattack

Collects SnapAttack data from configurable API endpoint groups.

Why Makes external security intelligence available in Splunk with scheduling tailored to each data set.

nssblock

Submits firewall block requests from Splunk alerts.

Why Lets detection workflows trigger timely, auditable network-containment actions.

iclookup

Looks up network context for IP addresses in Splunk.

Why Enriches events with useful network ownership and addressing information.