TekStream Add-on for Keri Borealis

The Keri Borealis Add-on for Splunk collects live door access and badge reader events from the Keri Borealis access control platform through its API. The add-on retrieves controller, trunk, source, credential, and event detail data from Borealis systems and provides field extractions to normalize access control events in Splunk. It supports configurable polling intervals and historical data collection, enabling security teams to monitor physical access events and investigate badge reader activity across Borealis-managed facilities. The add-on includes two dashboards for managing configuration settings and monitoring data inputs, and it uses KV store-based checkpointing to track collection state and prevent data loss during interruptions.