Skip to main content
Warning
This app is archived. App archiving documentation
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-On app icon

Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-On

Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-on provides a mechanism to map data from the Cisco AMP for Endpoints Event Input App for CIM compliant applications. The add-on also provides additional workflow actions so security analysts can go straight from Splunk Events to the Cisco AMP for Endpoints console.Built by Cisco AMPPortal
splunk product badge
Default Version 2.1.2

April 19, 2024

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 4.x

Rating
5
(2)

Log in to rate this app

Support
Archived Add-on
Ranking

#19 in Investigative

#33 in Endpoint

Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-on provides a mechanism to map data from the Cisco AMP for Endpoints Event Input App for CIM compliant applications. The add-on also provides additional workflow actions so security analysts can go straight from Splunk Events to the Cisco AMP for Endpoints console.