This Automation script uses the XSOAR API to get the audit logs and pushes them to Splunk HEC. Dependencies: SlunkPy and Demisto REST API integrations
Forward XSOAR Audit Logs to Splunk HEC
- Details
- Content
- Version History
This automation script takes a timeframe as input fetches the audit logs for the defined period. Then it pushes them to Splunk HEC.
PUBLISHER
Harri Ruuttila
INFO
| Supported By | Community | |
| Created | October 13, 2021 | |
| Last Release | October 13, 2021 |
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.Automations
1.0.0 - 1825451 (October 13, 2021)