sysmon-splunk-app

sysmon-splunk-app copied to clipboard

Hi. Just wondering if this app is still being maintained? I see that since the latest update Splunk have made som changes in default sourcetype for sysmon events, and also...

hettervik

So I installed you Sysmon app, already have the Splunk TA Sysmon app installed. I am able to query the data, etc. The Sysmon App however sees no data. 

petermorin123

hi, i stuck on first step "Make sure the threathunting index is present on your indexers" how to give rights to app to see other indexes? tnx.

y0d4a

Cloud vetting

4

Michael, With the increasing push to get apps in the Cloud, is there a possibility you could get this vetted for use in the Cloud? Thanks in advance for your...

malJohann

Dashboard Splunk App Sysmon App for Splunk sysmon-splunk-app 2.0.0 App(3544) on the Status dashboard runs a query sysmon | stats count by Computer | sort - count While the TA...

smithj-xilinx