Splunk SOAR | About

The EclecticIQ Intelligence Center app for Splunk SOAR allows you to exchange intelligence between your Intelligence Center and Splunk SOAR.

Features

• Create Entities in your EclecticIQ Intelligence Center (EIQ IC) based on intelligence in Splunk SOAR.

• Enrich EIQ IC Entities with Splunk SOAR intelligence.

• Search your EIQ IC intelligence from Splunk SOAR.

• Ingest Entities to use as events in playbooks.

Prerequisites

• EIQ IC v3.0.0 or later.

• Splunk SOAR v5.5.0 or later.

• An EIQ IC User with the relevant permissions (See Configure Intelligence Center).

Getting started

To integrate EIQ IC with Splunk SOAR:

1. Configure an API token, source Group, and outgoing feed in EIQ IC.

2. Install the app in Splunk SOAR.

3. Configure Splunk SOAR using your EIQ IC settings.

4. Start using the integration.