Cisco Cloudlock for Splunk
Overview
Details
The CloudLock Cloud Access Security Broker harnesses crowd-sourced, actionable cybersecurity intelligence to enable enterprises to securely leverage the cloud. CloudLock combats account compromises, cloud malware, and data breaches while facilitating compliance through a frictionless, cloud-native approach that deploys in minutes and has zero impact on end users.
Protecting any cloud app and platform, CloudLock secures SaaS, IaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, CloudLock is trusted to secure mission-critical cloud environments worldwide.
With CloudLock’s CIM-compliant Splunk app, security professionals are empowered to manage the entire cloud security incident lifecycle, from triaging to remediation and integrate cloud security management with existing Splunk workflows.
Protecting any cloud app and platform, CloudLock secures SaaS, IaaS, PaaS, and IDaaS environments, and provides unparalleled coverage of cloud traffic, including on- and off-network, programmatic and user-driven, by managed and unmanaged users, retroactively and in real-time. Deployed to over 750 organizations globally, CloudLock is trusted to secure mission-critical cloud environments worldwide.
With CloudLock’s CIM-compliant Splunk app, security professionals are empowered to manage the entire cloud security incident lifecycle, from triaging to remediation and integrate cloud security management with existing Splunk workflows.
Installing the CloudLock Splunk App
Follow these brief steps to install the CloudLock Splunk App. For more information about configuring and using the CloudLock Splunk App when it's installed, please reach out to CloudLock support for additional instructions.
- Download the CloudLock Splunk App.
- As a Splunk administrator, open the Splunk home page and select the Manage Apps control.
- Select "Install app from file".
- Choose the install file, then click Upload.
- When the upload completes, follow the instructions to restart Splunk.
- Select the Splunk icon in the top left part of the screen.
- The CloudLock App icon now appears on the home screen; select it to open the app.
If you want to upgrade the app please first backup the cl_polling_incidents.ini file. For example:
cp -a $SPLUNK_HOME/etc/apps/cloudlock/cache/cl_polling_incidents.ini /tmp
If you need assistance, please contact CloudLock support.
Visit CloudLock to learn more about our cloud security solutions.
Release Notes
Version 1.0.15
March 22, 2018
Version 1.0.14
March 20, 2018
This version introduces significant performance improvements as well as several bug fixes. For detailed information, please email: support@cloudlock.com.
Version 1.0.13
Aug. 15, 2016
Updates to support Splunk Enterprise v.6.3 and v.6.4.
Version 1.0.12
June 30, 2016
Modified dashboard stylesheet to support v6.3 and above changes.
Version 1.0.11
Feb. 5, 2016
Version 1.0.10
Feb. 4, 2016