Skip to main content
Warning
This app is archived. App archiving documentation
Sysmon App for Splunk app icon

Sysmon App for Splunk

The Sysmon App for Splunk provides rapid insights and operational visibility into small and large scale Sysmon deployments. Native out of the box alerting capabilities, reporting and dashboards to provide easy context and visibility into your endpoint data. Built by Mike Haag
splunk product badge

Default Version 2.0.0

March 21, 2018

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 4.x

Rating
5
(3)

Log in to rate this app

Support
Archived App

The Sysmon App for Splunk provides rapid insights and operational visibility into small and large scale Sysmon deployments. Native out of the box alerting capabilities, reporting and dashboards to provide easy context and visibility into your endpoint data. The Sysmon App for Splunk is easy to deploy and utilizes the already available Sysmon TA providing easy and instant value into your endpoint data. **Feature Request** Submit an issue via repository on Github (https://github.com/MHaggis/sysmon-splunk-app) or Twitter @m_haggis or @jarrettp **Support** Submit an issue via repository on Github - https://github.com/MHaggis/sysmon-splunk-app