Cisco Cloudlock for Splunk
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The CloudLock Cloud Access Security Broker harnesses crowd-sourced, actionable cybersecurity intelligence to enable enterprises to securely leverage the cloud. CloudLock combats account compromises, cloud malware, and data breaches while facilitating compliance through a frictionless, cloud-native approach that deploys in minutes and has zero impact on end users.
Protecting any cloud app and platform, CloudLock secures SaaS, IaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, CloudLock is trusted to secure mission-critical cloud environments worldwide.
With CloudLock’s CIM-compliant Splunk app, security professionals are empowered to manage the entire cloud security incident lifecycle, from triaging to remediation and integrate cloud security management with existing Splunk workflows.
Protecting any cloud app and platform, CloudLock secures SaaS, IaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, CloudLock is trusted to secure mission-critical cloud environments worldwide.
With CloudLock’s CIM-compliant Splunk app, security professionals are empowered to manage the entire cloud security incident lifecycle, from triaging to remediation and integrate cloud security management with existing Splunk workflows.
Installing the Cisco CloudLock for Splunk App
Follow this guide to install and use the Cisco Cloudlock for Splunk app.
If you want to upgrade the app please first backup the cl_polling_incidents.ini file. For example:
cp -a $SPLUNK_HOME/etc/apps/cloudlock/cache/cl_polling_incidents.ini /tmp
If you need assistance, please contact CloudLock support.
Visit CloudLock to learn more about our cloud security solutions.
Release Notes
Version 1.0.15
March 22, 2018
Version 1.0.14
March 20, 2018
This version introduces significant performance improvements as well as several bug fixes. For detailed information, please email: support@cloudlock.com.
Version 1.0.13
Aug. 15, 2016
Updates to support Splunk Enterprise v.6.3 and v.6.4.
Version 1.0.12
June 30, 2016
Modified dashboard stylesheet to support v6.3 and above changes.
Version 1.0.11
Feb. 5, 2016
Version 1.0.10
Feb. 4, 2016