Skip to main content
TheHive/Cortex app icon

TheHive/Cortex

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard.Built by Alexandre Demeyer
splunk product badge
Default Version 4.2.2

August 18, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 8.x, 6.x, 5.x, 4.x, 3.x

Rating
4
(7)

Log in to rate this app

Support
Developer Supported
Ranking

#17 in Ticketing

#26 in SIEM

This TA allows to add interaction features between TheHive or Cortex (https://www.strangebee.com/) and Splunk. It allows to retrieve all kind of information from TheHive/Cortex and to perform actions on these instances using Splunk, from a search or from a predefined dashboard. This TA is supporting only TheHive 5. For having an app supporting TheHive 3 or 4, please check the oldest releases. It's also supporting the Cortex 3 version. More information here: https://github.com/LetMeR00t/TA-thehive-cortex