Centrify Splunk Add-on
Overview
Details
Centrify is a leader in securing enterprise identities against cyberthreats that target today’s hybrid IT environment of cloud, mobile and on-premises. Centrify helps protect against the leading point of attack used in data breaches ― compromised credentials — by securing an enterprise’s apps and infrastructure for all its users.
The Centrify Add-on for Splunk helps take the Centrify Server Suite events and categorize them into standard Centrify event categories. The Add-on also helps normalize the events and make it Common Information Model compatible.
The Centrify Add-on for Splunk helps take the Centrify Server Suite events and categorize them into standard Centrify event categories. The Add-on also helps normalize the events and make it Common Information Model compatible.
Please find a post on Centrify Community , that'll help you with integrating Centrify Server Suite events into Splunk.
Link to the post:
http://community.centrify.com/t5/Community-Tech-Blog/Integrating-Centrify-Server-Suite-with-SIEM-Tools-Part-2/ba-p/23982
Also, note that you have link at the bottom to an Integration guide that goes into more details of the Centrify Server Suite and Splunk Integration.
Release Notes
Version 2.1
Sept. 15, 2016
Version 2.0
Aug. 19, 2016
The Centrify Add-On V2.0 for Splunk:
- Deprecated the Centrify Splunk Insight Application
- This Add-On helps normalize the Centrify Server Suite events into Splunk and at the same time make it CIM complaint