Skip to main content
Ctrl+K
Logo image Logo image

EclecticIQ Intelligence Center 3.1.2

Site Navigation

  • Release notes
  • Install Configure Upgrade
  • Get to know EclecticIQ Intelligence Center
  • Work with intelligence
  • Integrations

Section Navigation

  • EclecticIQ Integrations Life Cycle Policy
  • Extensions
    • Enrichers
      • About enrichers
      • Configure enrichers
      • Run enrichers
      • Rules for enrichers
      • Saving data
    • Incoming Feeds
      • Access incoming feeds
      • Create and configure incoming feeds
      • Start and stop incoming feeds
      • Reingest incoming feeds
      • Delete incoming feed content and configuration
    • Outgoing feeds
      • About outgoing feeds
      • Access outgoing feeds
      • Configure content types
      • Download outgoing feed created packages
      • Create and configure outgoing feeds
      • Start and stop outgoing feeds
  • Apps
    • Splunk (Legacy)
      • About the Splunk integration
      • Get started with the Splunk integration
      • Work with EclecticIQ Fusion Center and Splunk
      • Work with the EclecticIQ Platform App for Splunk
      • Work with Splunk Enterprise Security
      • Release notes - Splunk integration
        • Release notes - Splunk integration 2.3.1
        • Release notes - Splunk integration 2.4.0
        • Release notes - Splunk integration 2.5.0
        • Release notes - Splunk integration 2.5.1
        • Release notes - Splunk integration 2.5.2
        • Release notes - Splunk integration 2.5.3
        • Release notes - Splunk integration 2.5.4
        • Release notes - Splunk integration 2.5.5
    • Splunk Phantom (Legacy)
      • Get started with the Splunk Phantom integration
      • Release notes - Splunk Phantom integration
    • IBM QRadar (Legacy)
      • Release notes - IBM QRadar integration
        • Release notes - IBM QRadar integration 1.3.2
        • Release notes - IBM QRadar integration 1.3.3
        • Release notes - IBM QRadar integration 1.3.4
        • Release notes - IBM QRadar integration 1.3.5
      • About the Threat Intelligence EclecticIQ Platform App for IBM QRadar
      • Install and Configure the app on QRadar
      • Upgrade the app on QRadar
      • Configure the QRadar app for Fusion Center
      • Work with the app on QRadar
    • Exchange data between EclecticIQ Intelligence Center instances
      • Exchanging data between EclecticIQ Intelligence Center instances
      • Create an automation role
      • Create an automation user
      • Create an automation group
      • Create a TAXII outgoing feed
      • Create a TAXII incoming feed
      • About ingestion discrepancies
    • Arcsight
      • About the Arcsight integration
      • Get data from EclecticIQ Intelligence Center to Arcsight
        • Installation of Smart Connector(s)
        • Configure Intelligence Center
        • Import the EclecticIQ base content package in ESM
        • Incoming events
        • EclecticIQ Platform connector field mappings
      • Create sightings and lookups from ArcSight to EclecticIQ Intelligence Center
        • CounterACT connector installation and configuration
        • Create Entity Command
    • Cortex XSOAR: EclectiCIQ Intelligence Center integration
    • IBM Resilient
      • About the IBM Resilient integration
      • Before you start with IBM Resilient
      • Install EclecticIQ Platform Integration
      • Configure Intelligence Center Integration
      • Bootstrap Intelligence Center Integration
      • Run resilient-circuits as a service
      • Configure manual sighting creation
      • Manually create sightings
      • Create artifacts and search for matches
      • Upgrade EclecticIQ Platform Integration
      • Uninstall EclecticIQ Platform Integration
      • Release notes - IBM Resilient integration
        • Release notes - IBM Resilient integration 1.1.5
        • Release notes - IBM Resilient integration 1.1.3
        • Release notes - IBM Resilient integration 1.1.2
        • Release notes - IBM Resilient integration 1.0.3
  • EclecticIQ Browser Extension (legacy)
    • Getting started
    • Find ingested entities
    • Manage observables and entities
    • Manage existing observables and entities
    • Regular expressions for extracting observables

Release notes - Splunk integration#

Caution

This application is no longer supported.

From 22 August 2022, use both of the following apps instead:

  • EclecticIQ Intelligence Center App (Documentation)

  • EclecticIQ Intelligence Center TA (Documentation)

previous

Work with Splunk Enterprise Security

next

Release notes - Splunk integration 2.3.1