This Automation script uses the XSOAR API to get the audit logs and pushes them to Splunk HEC. Dependencies: SlunkPy and Core REST API integrations.
Forward XSOAR Audit Logs to Splunk HEC
- Details
- Content
- Dependencies
- Version History
This automation script takes a timeframe as input fetches the audit logs for the defined period. Then it pushes them to Splunk HEC.
Name | Description |
---|---|
ForwardAuditLogsToSplunkHEC |
Name | Description |
---|---|
ForwardAuditLogsToSplunkHEC | This Automation script uses the XSOAR API to get the audit logs and pushes them to Splunk HEC. Dependencies: SlunkPy and Core REST API integrations. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Cortex REST API | By: Cortex XSOAR |
Splunk | By: Cortex XSOAR |
Pack Name | Pack By |
---|
Pack Name | Pack By |
---|---|
Identity | By: Cortex XSOAR |
Common Playbooks | By: Cortex XSOAR |
Common Types | By: Cortex XSOAR |
Splunk | By: Cortex XSOAR |
Common Scripts | By: Cortex XSOAR |
Cortex REST API | By: Cortex XSOAR |
Malware Core | By: Cortex XSOAR |
Rasterize | By: Cortex XSOAR |
Filters And Transformers | By: Cortex XSOAR |
Access Investigation | By: Cortex XSOAR |
Asset | By: Cortex XSOAR |
Base | By: Cortex XSOAR |
This automation script takes a timeframe as input fetches the audit logs for the defined period. Then it pushes them to Splunk HEC.
This automation script takes a timeframe as input fetches the audit logs for the defined period. Then it pushes them to Splunk HEC.
PLATFORMS
INFO
Supported By | Community | |
Created | October 13, 2021 | |
Last Release | December 4, 2024 |
WORKS WITH THE FOLLOWING INTEGRATIONS:


