Splunk ES FAQ
Technical information about the TruSTAR App for Splunk Enterprise Security (ES).
Station Features
Getting Started
UI Walkthrough
Cases
Dashboard
Filter and Refine Panel
Main Screen
Marketplace
Navigate a Visualization
Navigation Bar
Searching
TruSTAR Community Chat
TruSTAR Enclaves
UI Tour (with Links)
Using Notes
User Settings
Working with Reports
Copying a Report
Exporting Report Data
Moving a Report
Redacting Data from Reports
Report Distribution via Email
Reports Basics
Reports Constellation View
Reports List View
Reports Panel
Submitting a Report
Updating a Report
Working with IOCs
Admin Features
Auto Whitelisting
Automating Forwarding to an Enclave Email Inbox
Company Whitelist
Enclave Email Inbox
Managing Users
Setting Up Multi-Factor Authentication (MFA)
Setting up a Service Account
MITRE ATT&CK
Threat Actors
Scripted Extensions
Application Integrations
Single Sign-On (SSO)
SIEM
TAXII Applications
Orchestration
Case Management
Chrome Extension
Slack
Intelligence Source Integrations
Digital Risk/ATO
Endpoint
Cisco AMP Threat Grid
Cisco AMP Threat Grid Indicator Query
Crowdstrike Falcon Detect
Crowdstrike Falcon Intelligence
Crowdstrike Falcon Reports
Threat Intel Services
FireEye iSight
IBM X-Force
IBM XForce IRIS
Intel 471 Adversary Intelligence
Intel 471 Alerts
Intel 471 Malware Intelligence
Recorded Future Hash Intelligence
Recorded Future IP Intelligence
Recorded Future URL Intelligence
Recorded Future Vulnerability Intelligence
VirusTotal
Trusted Community
Other
AWS GuardDuty
Alienvault OTX Pulse
Cofense Intelligence
Cybersource
Facebook Threat Exchange
Farsight Security
Hybrid Analysis
Joe Sandbox
MISP
Proofpoint TAP Intelligence
Technical Info
Intel Feeds Source URLs
OSINT Sources Tech Specs
Premium Intel Sources Tech Specs
RSS Open Sources Tech Specs
TruSTAR’s Normalized Indicator Score Scale
COVID-19 OSINT Community Enclave
Technology
FAQs
TruSTAR Policies
Clearing browser cookies and caches
Entities Supported
Finding your API Key
IOC Uploading
Integrations
Intel Sources FAQ
Login Problems
REST API and Python
Security
Sending ArcSight cases to TruSTAR
TruSTAR Basics
Using Proofpoint with TruSTAR
Product Release
All Categories > Application Integrations > SIEM > Splunk Enterprise Security
Splunk Enterprise Security
3 articles
