splunk
Cisco Cloudlock for Splunk
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
The Cisco Cloudlock Cloud Access Security Broker (CASB) uses crowd-sourced, actionable cybersecurity intelligence to enable enterprises to use cloud apps and platforms securely. Cloudlock combats account compromises, cloud malware, and data breaches while facilitating compliance through a frictionless, cloud-native approach that deploys in minutes and has zero impact on end users.
Cloudlock secures SaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, Cisco Cloudlock is trusted to secure mission-critical cloud environments worldwide.
With Cisco Cloudlock’s CIM-compliant Splunk app, security professionals can manage the entire cloud security incident lifecycle from triage to remediation, and integrate cloud security incident management into existing Splunk workflows.
Cloudlock secures SaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, Cisco Cloudlock is trusted to secure mission-critical cloud environments worldwide.
With Cisco Cloudlock’s CIM-compliant Splunk app, security professionals can manage the entire cloud security incident lifecycle from triage to remediation, and integrate cloud security incident management into existing Splunk workflows.
Installing the Cisco Cloudlock for Splunk App
Follow this guide to install and use the Cisco Cloudlock for Splunk app.
If you want to upgrade the app please first backup the cl_polling_incidents.ini file. For example:
cp -a $SPLUNK_HOME/etc/apps/cloudlock/cache/cl_polling_incidents.ini /tmp
If you need assistance, please contact Cisco Cloudlock support.
Visit Cisco Cloudlock to learn more about our cloud security solutions.
Release Notes
Version 1.0.18
Dec. 14, 2020
Fix for datetime issue.
Version 1.0.17
Dec. 6, 2020
Update to TOS.
Version 1.0.16
June 17, 2020
Support Splunk v.8.0.
Version 1.0.15
March 22, 2018
Version 1.0.14
March 20, 2018
This version introduces significant performance improvements as well as several bug fixes. For detailed information, please email: support@cloudlock.com.
Version 1.0.13
Aug. 15, 2016
Updates to support Splunk Enterprise v.6.3 and v.6.4.
Version 1.0.12
June 30, 2016
Modified dashboard stylesheet to support v6.3 and above changes.
Version 1.0.11
Feb. 5, 2016
Version 1.0.10
Feb. 4, 2016