PAVO Security App for Splunk
Overview
Details
PAVO Security App For Splunk Documentation
Overview
About PAVO Security App For Splunk
- Author
- Aplura, LLC.
- App Version
- 0.9.2
- App Build
- 0
- Platforms
- Splunk Enterprise
- Splunk Enterprise versions
- 8.0, 7.3, 7.2, 7.1, 7.0
- Vendor Products
- Aplura API
- Has index-time operations
- False
- Creates an index
- False
- Implements summarization
- Currently, the app does not generate summaries
- Currently, the app does not generate summaries
PAVO Security App For Splunk allows a Splunk Enterprise Security analyst or other user to gather curated searches and news items that are relevant to Security. This is a subscription based service.
Scripts and binaries
This App provides the following scripts:
Release notes
Version 0.9.3
-
Bug
-
[APL029-419] - Add lookup for recommended apps
-
[SAFS-70] - Add drilldown to data model counts on Overview page
-
[SAFS-78] - Add DNS app to menu
-
[SAFS-77] - Add Endpoint app to menu
-
Version 0.9.0
-
Bug
-
[SAFS-7] - Provide apl.conf.spec
-
[SAFS-16] - EULA bugs
-
[SAFS-19] - Fix Account Validators for email and full_email
-
[SAFS-31] - Search Detail link not working
-
[SAFS-37] - Error message immediately after creating account
-
-
New Feature
- [SAFS-18] - EULA Check
-
Task
- [SAFS-60] - Rename app to PAVO Security App for Splunk
-
Improvement
-
[SAFS-6] - Documentation Update
-
[SAFS-33] - Remove Giant PEACOCK image from Overview screen
-
[SAFS-34] - Change API Not Configured to a more user-friendly message
-
[SAFS-44] - Add final icon/image to Overview page
-
[SAFS-49] - Recommended Apps panel in Overview Tab: Display user friendly app name, not internal app name
-
[SAFS-53] - Account Status Modal - Email Verification
-
About this release
Version 0.9.2 of PAVO Security App For Splunk is compatible with:
| Splunk Enterprise versions | 8.0, 7.3, 7.2, 7.1, 7.0 |
| Platforms | Splunk Enterprise, Splunk Cloud |
Support and resources
Questions and answers
Access questions and answers specific to PAVO Security App For Splunk at https://answers.splunk.com . Be sure to tag your question with the App.
Support
-
Support Email: None
-
Support Offered: Splunk Answers, Community Engagement
Installation and Configuration
Software requirements
Splunk Enterprise system requirements
Because this App runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.
Download
Download PAVO Security App For Splunk at https://splunkbase.splunk.com/app/3993/.
Installation steps
Deploy to single server instance
Follow these steps to install the app in a single server instance of Splunk Enterprise:
-
Deploy as you would any App, and restart Splunk.
-
Navigate to the Content view.
-
Configure an Account.
Deploy to Splunk Cloud
- Have your Splunk Cloud Support handle this installation.
Deploy to a Distributed Environment
- For each Search Head in the environment, deploy a copy of the App.
User Guide
Create Account
-
When first accessing the PAVO Security App for Splunk, you must agree to the EULA.
-
Click either offline or online mode.
-
If online, enter your Name, email, and a password. These will create an account at the portal.
-
Please visit the portal for any billing needs.
Lookups
The PAVO Security App For Splunk contains the following lookup files.
-
-
available_apps_list.csv
- contains the list of recommended apps that may be installed as part of the PAVO Security App For Splunk
-
Event Generator
PAVO Security App For Splunk does not include an event generator. This allows the product to display data, when there are no inputs configured.
Acceleration
-
Summary Indexing: No
-
Data Model Acceleration: No
-
Report Acceleration: No
Third Party Notices
Version 0.9.2 of PAVO Security App For Splunk incorporates the following Third-party software or third-party services.
PAVO Security App For Splunk
Navigation
Related Topics
2018, Aplura, LLC. | Powered by Sphinx 2.2.1 & Alabaster 0.7.12
Release Notes
Version 0.10.0
- Dashboard Update for JS
Version 0.9.2
Fixes to App Configuration Page