PAVO Security App For Splunk Documentation

Overview

About PAVO Security App For Splunk

Author
- Aplura, LLC.
App Version
- 0.9.2
App Build
- 0
Platforms
- Splunk Enterprise
Splunk Enterprise versions
- 8.0, 7.3, 7.2, 7.1, 7.0
Vendor Products
- Aplura API
Has index-time operations
- False
Creates an index
- False
Implements summarization
- Currently, the app does not generate summaries

PAVO Security App For Splunk allows a Splunk Enterprise Security analyst or other user to gather curated searches and news items that are relevant to Security. This is a subscription based service.

Scripts and binaries

This App provides the following scripts:

Release notes

Version 0.9.3

Bug
- [APL029-419] - Add lookup for recommended apps
- [SAFS-70] - Add drilldown to data model counts on Overview page
- [SAFS-78] - Add DNS app to menu
- [SAFS-77] - Add Endpoint app to menu

Version 0.9.0

Bug
- [SAFS-7] - Provide apl.conf.spec
- [SAFS-16] - EULA bugs
- [SAFS-19] - Fix Account Validators for email and full_email
- [SAFS-31] - Search Detail link not working
- [SAFS-37] - Error message immediately after creating account
New Feature
- [SAFS-18] - EULA Check
Task
- [SAFS-60] - Rename app to PAVO Security App for Splunk
Improvement
- [SAFS-6] - Documentation Update
- [SAFS-33] - Remove Giant PEACOCK image from Overview screen
- [SAFS-34] - Change API Not Configured to a more user-friendly message
- [SAFS-44] - Add final icon/image to Overview page
- [SAFS-49] - Recommended Apps panel in Overview Tab: Display user friendly app name, not internal app name
- [SAFS-53] - Account Status Modal - Email Verification

About this release

Version 0.9.2 of PAVO Security App For Splunk is compatible with:


Splunk Enterprise versions	8.0, 7.3, 7.2, 7.1, 7.0
Platforms	Splunk Enterprise, Splunk Cloud

Support and resources

Questions and answers

Access questions and answers specific to PAVO Security App For Splunk at https://answers.splunk.com . Be sure to tag your question with the App.

Support

Support Email: None
Support Offered: Splunk Answers, Community Engagement

Installation and Configuration

Software requirements

Splunk Enterprise system requirements

Because this App runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.

Download

Download PAVO Security App For Splunk at https://splunkbase.splunk.com/app/3993/.

Installation steps

Deploy to single server instance

Follow these steps to install the app in a single server instance of Splunk Enterprise:

Deploy as you would any App, and restart Splunk.
Navigate to the Content view.
Configure an Account.

Deploy to Splunk Cloud

Have your Splunk Cloud Support handle this installation.

Deploy to a Distributed Environment

For each Search Head in the environment, deploy a copy of the App.

User Guide

Create Account

When first accessing the PAVO Security App for Splunk, you must agree to the EULA.
Click either offline or online mode.
If online, enter your Name, email, and a password. These will create an account at the portal.
Please visit the portal for any billing needs.

Lookups

The PAVO Security App For Splunk contains the following lookup files.

- available_apps_list.csv
  - contains the list of recommended apps that may be installed as part of the PAVO Security App For Splunk

Event Generator

PAVO Security App For Splunk does not include an event generator. This allows the product to display data, when there are no inputs configured.

Acceleration

Summary Indexing: No
Data Model Acceleration: No
Report Acceleration: No

Third Party Notices

Version 0.9.2 of PAVO Security App For Splunk incorporates the following Third-party software or third-party services.

PAVO Security App For Splunk

Navigation

Related Topics

Documentation overview

2018, Aplura, LLC. | Powered by Sphinx 2.2.1 & Alabaster 0.7.12

PAVO Security App for Splunk

0