The Accellion Enterprise Content Firewall enables secure third party communication across email, file sharing, enterprise apps, mobile, web forms, managed file transfer, and SFTP. Use the Accellion CISO Dashboard Splunk App for real-time visibility of all sensitive content entering or leaving the enterprise via these communication channels.
Drill down to take action on anomalies with ad hoc reports:
Setup
Please find installation documentation zipped in the download file
Please note that minor IP-to-geolocation mapping differences between Splunk and Accellion can cause occasional alert location inconsistencies.
Accellion Splunk CISO Add-On Version 1.4
Please note that minor IP-to-geolocation mapping differences between Splunk and Accellion can cause occasional alert location inconsistencies.
Accellion Splunk CISO Dashboard App Version 1.2
Requires Accellion server 6.2 or higher. Learn more at https://www.accellion.com.
Accellion’s CISO Dashboard App for Splunk now provides:
1. Splunk Forwarder integration with the Accellion server. It forwards all file, file scanner, user, administrative, and system events to Splunk.
2. Extensive real-time visualizations:
• Geographic view with zoom and pan displaying all file traffic, logins, failed logins, and send and receive activities.
• Filters by time range, client type, email domain, region, and pass/quarantine status.
• Detailed reports for files quarantined for malware or blocked by DLP.
• Detailed graphics for top users by activity type, top email domains by activity type, and time trends by activity type.
Drill-down reports for all file actions to show fine-grained details.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.