Skip to main content
TheHive/Cortex app icon

TheHive/Cortex

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard.Built by Alexandre Demeyer
splunk product badge
Default Version 5.0.0

October 25, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.6, 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3

Rating
4
(7)

Log in to rate this app

Support
Developer Supported
Ranking

#17 in Ticketing

#26 in SIEM

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard. This TA is supporting only TheHive 5. For having an app supporting TheHive 3 or 4, please check the oldest releases. It's also supporting the Cortex 3 version. More information here: https://github.com/LetMeR00t/TA-thehive-cortex