Alerting

How do I add TrendMicro to Splunk?

cpetedocx
New Member

I was able to download the splunk trendmicro deep security, but wasn't able to utilize it. I downloaded the Home | Splunk 7.2.1 but couldn't put the trend micro app in there.

Tags (1)
0 Karma

hijacob
Communicator

Hi!

You can install the app via GUI (Apps/Manage Apps/Install App) or by CLI. For Linux/Unix have a look at https://github.com/deep-security/splunk.

Greetings,
Jacob

0 Karma

kmorris_splunk
Splunk Employee
Splunk Employee

You can install the app through the GUI: Apps...Manage Apps...Install App from file. Or you can unzip it in $SPLUNK_HOME/etc/apps/ directory.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Building on that, instructions for app installation is generally documented at https://docs.splunk.com/Documentation/AddOns/released/Overview/Singleserverinstall

It sounds like you downloaded Splunk Enterprise 7.2.1. You should then be able to download and install the TrendMicro app on top of that.

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...