ThreatConnect Application for Splunk User Guide

The ThreatConnect^® Application (App) for Splunk^® gives Splunk users the ability to leverage customizable threat intelligence integrated into Splunk from their ThreatConnect accounts. ThreatConnect provides the ability to aggregate threat intelligence from multiple sources (i.e., open source, commercial, communities, and internally created), analyze and track identified adversary infrastructure and capabilities, and put that refined knowledge to work in Splunk, identifying threats targeting organizations.

Documentation for previous versions (3.2, 3.1, 3.0, and 2.3) of the ThreatConnect Application for Splunk is available in this article's Attachments section on the right side of the screen.

Documentation for the latest version of the Splunk integration is available at https://threatconnect.readme.io/docs/splunk-1.

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.
Splunk^® is a registered trademark of Splunk, Inc.