Absolute Data and Device Security (DDS) App for Splunk

The Absolute Data & Device Security (DDS) App enables Splunk users to view the alert events logged in Absolute DDS in a format that enhances readability and analysis. After Splunk indexes the alert events, you can work with the event data using the set of predefined Splunk dashboards included with the app. You can also access the Absolute DDS Device Freeze feature directly from Splunk to freeze at-risk devices. Before you can use the Absolute DDS App to view alert events, you need to install the Absolute SIEM Connector on a network computer running a supported version of the Windows operating system. For more information, see the Absolute SIEM Connector Install Guide, which is available on the Documentation page in the Absolute DDS console. The Absolute DDS App is supported in Splunk Enterprise and Splunk Cloud.