Skip to main content
Warning
This app is archived. App archiving documentation
Datalake2Splunk app icon

Datalake2Splunk

This app provides the ability to ingest Orange Datalake threat intel given an api token. It replaces former app Datalake Connect (https://splunkbase.splunk.com/app/5463) to be able to pull data using a query hash obtained from Datalake thus having all filters available. A new version of Datalake API will be available during September 2025. Thus, a new addon has been created to allow a quick switch. https://splunkbase.splunk.com/app/7982 This app will be archived duting October 2025.Built by Splunkapps Cybersoc OCD
splunk product badge
Default Version 1.1.2

September 11, 2025

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2

Rating
5
(1)

Log in to rate this app

Support
Archived Add-on

This app provides the ability to ingest Orange Datalake threat intel given an api token. It replaces former app Datalake Connect (https://splunkbase.splunk.com/app/5463) to be able to pull data using a query hash obtained from Datalake thus having all filters available. A new version of Datalake API will be available during September 2025. Thus, a new addon has been created to allow a quick switch. https://splunkbase.splunk.com/app/7982 This app will be archived duting October 2025.