JupiterOne Add-on for Splunk

The JupiterOne Add-on imports and enriches JupiterOne Alerts, allowing you to access this data in Splunk. It collects alert data directly from JupiterOne, parses the data and extracts valuable data so that you can trigger your own notable alerts in your Splunk account. It also provides workflow actions that allow you to link back to entities in JupiterOne or search your JupiterOne account for any field value in Splunk, regardless of entitytype and now supports a Custom Command so that you can execute a J1QL query directly from Splunk and display the response from JupiterOne in your Splunk account.