Cylana Security Platform

The Cylana Security Add-on enables ingestion and parsing of Cylana security events in Splunk. Cylana events are delivered to Splunk using the HTTP Event Collector (HEC) and indexed with Cylana-specific sourcetypes such as cylana:alert, cylana:indicator, cylana:asset, and cylana:exposure. The add-on provides automatic JSON field extraction to make Cylana security telemetry searchable and usable within Splunk.