Splunk Enterprise Security

Can we use the Vormetric Security Intelligence app for Splunk 6.4.2?

reznog12
New Member

In our environment, Splunk 6.4.2 has been deployed. I need to know if the Vormetric Security Intelligence app currently available can be used on Splunk 6.4.2?

The official Vormetric Security Intelligence app page: https://splunkbase.splunk.com/app/1445/ lists only the following versions of Splunk as compatible:

6.1
6.0
5.0

We need to integrate Vormetric with Splunk Enterprise in an effort to more intelligently analyze Vormetric logs generated within our environment.

Note: We use Splunk Enterprise Security for monitoring so these logs will have to be ported, somehow, into Splunk ES. How deep does the rabbit hole gets? Is this something that can be accomplished by someone with limited Splunk experience or will Splunk Professional Services need to get involved?

Any information in regards to this will be much appreciated. Thanks.

0 Karma

steveta_uk
Explorer

The Vormetric app is known to work on 6.2, 6.3 and 6.4 releases, including 6.4.2.

I am not familiar with Splunk ES so cannot answer on whether changes would be required to run the Vormetric app in that environment.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...