Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
CCX Extensions for Airlock Digital app icon

CCX Extensions for Airlock Digital

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk.

splunk product badge

Latest Version 1.0.3
August 24, 2025
Compatibility
Not Available
Platform Version: 10.0, 9.4, 9.3, 9.2, 9.1
CIM Version: 6.x, 5.x
Rating

0

(0)

Log in to rate this app
Support
CCX Extensions for Airlock Digital support icon
Not Supported
About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Extensions for Airlock Digital Add-on look to provide field extraction and CIM compliance for Airlock Digital log sources captured via the Add-on Airlock Digital or via HTTP Event Collector (HEC). This Technical Add-on does not replace the public Splunk Airlock Digital Add-On (https://splunkbase.splunk.com/app/5674) but works as an additional extension to be deployed on Search Heads (only). This add-on provides field extraction and CIM compliance for sourcetypes "airlock:svractivities" and "airlock:exechistories". Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alerts, Authentication, Change, and Endpoint.

Categories

Created By

Henrique Linsmeyer

Type

addon

Downloads

443

Resources

Log in to report this app listing