Skip to main content
Warning
This app is archived. App archiving documentation
Cisco Secure Endpoint (formerly AMP for endpoints) app icon

Cisco Secure Endpoint (formerly AMP for endpoints)

The Cisco Secure Endpoint Events App (formerly AMP for endpoints) provides a mechanism to create, update, and delete event streams in Cisco Advanced Malware Protection (AMP) for Endpoints via the API and index them in your Splunk® instance to make them searchable. All you need to do is provide your API host and credentials from your AMP for Endpoints account and specify the stream parameters. This app has been tested on Splunk v8.x, v9.0 and is cloud ready.Built by Cisco Security
splunk product badge
Default Version 3.0.0

February 7, 2023

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
3
(11)

Log in to rate this app

Support
Archived App
Ranking

#17 in Investigative

#30 in Endpoint

The Cisco Secure Endpoint Events App (formerly AMP for endpoints) provides a mechanism to create, update, and delete event streams in Cisco Advanced Malware Protection (AMP) for Endpoints via the API and index them in your Splunk® instance to make them searchable. All you need to do is provide your API host and credentials from your AMP for Endpoints account and specify the stream parameters. This app has been tested on Splunk v8.x, v9.0 and is cloud ready.