Ivanti Device and Application Control (IDAC) App for Splunk

The Ivanti Device and Application Control App for Splunk provides pre-built dashboards for IDAC data that is imported with the IDAC Add-on for Splunk. The dashboards in this app expose both statistics and detailed views on all activities - blocks, shadowing, admin audit activity and agent updates. Supported Versions of Ivanti Device and Application Control - IDAC 5.3 (tested) - Any version of IDAC that supports SIEM integration using adc_alp_[architecture].dll to either Windows event logs or flat file (.json) logs