Centrify App for Splunk

Centrify, a recognized worldwide leader in Identity-Centric Privileged Access Management (PAM) solutions, offers its customers seamless integration with Splunk Enterprise Security. Through the Centrify App for Splunk, customers who leverage Splunk to monitor, search, analyze, and visualize IT machine-generated data can now enrich that data with Centrify-specific events. The Centrify App for Splunk provides Centrify Privilege Elevation Service customers with dashboards and reports designed to properly interpret and display Centrify Audit events. They can be used as-is, or to enrich existing Splunk visualizations with Centrify security-related event data. Key Features: · Dashboards around login activity, privileged access activity, privileged access anomalies, and admin activity. · Reports around privileged admin activity, login activity, authorization failure, and more. · Alerts around multiple login failures in the last day, privileged command authentication failures in the last day, and more.