Splunk Enterprise Security

Can we use the Vormetric Security Intelligence app for Splunk 6.4.2?

reznog12
New Member

In our environment, Splunk 6.4.2 has been deployed. I need to know if the Vormetric Security Intelligence app currently available can be used on Splunk 6.4.2?

The official Vormetric Security Intelligence app page: https://splunkbase.splunk.com/app/1445/ lists only the following versions of Splunk as compatible:

6.1
6.0
5.0

We need to integrate Vormetric with Splunk Enterprise in an effort to more intelligently analyze Vormetric logs generated within our environment.

Note: We use Splunk Enterprise Security for monitoring so these logs will have to be ported, somehow, into Splunk ES. How deep does the rabbit hole gets? Is this something that can be accomplished by someone with limited Splunk experience or will Splunk Professional Services need to get involved?

Any information in regards to this will be much appreciated. Thanks.

0 Karma

steveta_uk
Explorer

The Vormetric app is known to work on 6.2, 6.3 and 6.4 releases, including 6.4.2.

I am not familiar with Splunk ES so cannot answer on whether changes would be required to run the Vormetric app in that environment.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...