TheHive/Cortex

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard.

Built by

Latest Version 4.1.0

March 21, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 6.x, 5.x, 4.x

Rating

3

(6)

Log in to rate this app

Support

Developer Supported app

Ranking

#17

in Ticketing

#25

in SIEM

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard. This TA is supporting only TheHive 5. For having an app supporting TheHive 3 or 4, please check the oldest releases. It's also supporting the Cortex 3 version. More information here: https://github.com/LetMeR00t/TA-thehive-cortex