Splunk App

Avanan offers an App for Splunk, publicly available in SplunkBase.

Avanan Splunk App pulls security events from Avanan to Splunk. The App allows our customers to consume Avanan security events on the same Splunk platform as other security solutions.
Splunk

The App supports both Splunk Enterprise and Cloud.

Integrate Avanan Splunk App

  1. Go to "Security Engines" page and select the "Send security events to Splunk" engine under "SIEM Integration".
    Make sure to select "Upload to the Avanan Splunk App" in the configuration.
    Splunk engine
  2. Go to SplunkBase and deploy the Avanan Splunk App: https://splunkbase.splunk.com/app/4880
  3. Install the App.
  4. Enter the app Set Up.
    Splunk SetUp
  5. Enter Client ID and Client Secret.
    To obtain Client ID and Secret contact Avanan Support.