Xage App for Splunk

The Xage Fabric app provides Zero Trust security monitoring dashboards and Enterprise Security correlation searches for Xage Fabric environments. The app visualizes authentication events, privileged credential access, device access patterns, and security alerts generated by Xage's Zero Trust platform. It ships with seven operational dashboards covering authentication activity, privileged operations, security alerts, Enterprise Security detections, and device inventory. The app includes nine Enterprise Security correlation searches that detect suspicious patterns such as multiple failed device access attempts, credential unveil spikes, Active Directory password rotation failures, and lateral movement across devices. All correlation searches ship disabled by default and can be selectively enabled through Enterprise Security Content Management. Detection thresholds are implemented as tunable macros. The app depends entirely on the stg_Xage_TA technical add-on for data collection and CIM field mappings.