Are you interested in our Early Access Program (EAP)? This program allows you to preview code, test in your lab and provide feedback prior to General Availability (GA) release of all Infoblox products. If so, please click the link here.

Best Practices

Splunk application for ActiveTrust Cloud

Posts: 15

Splunk application for ActiveTrust Cloud

Hello,

I have just published a Splunk application for ActiveTrust Cloud.

This application allows to:
- get ActiveTrust Cloud logs into Splunk using the REST API introduced with ATC 2.0
- filter it efficiently with full drill down support based on the time, threat property, threat class, source IP, domain name, query type and much more
- get context from Infoblox Dossier threat intelligence.

Mandatory requires ActiveTrust Cloud.
Optionally requires Dossier for threat intelligence

https://splunkbase.splunk.com/app/3850/

Some screenshots

Any feedback welcome.

Regards

Nicolas