October 8, 2026
Phosphorus Add-on for Splunk
CIM-normalized field extraction for Phosphorus xIoT/OT device interrogation and audit events sent to Splunk HEC.Built by Dragos, Inc, an official Splunk PartnerSplunk Enterprise, Splunk Cloud
Platform Version: 10.7, 10.6, 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 8.x
Log in to rate this app
Phosphorus discovers, assesses, and manages extended IoT (xIoT) and OT devices on enterprise networks, and can forward device and audit events to Splunk via the HTTP Event Collector (HEC). Out of the box, those events arrive as raw JSON that isn't normalized to Splunk's data model, which makes them hard to search, correlate, and use in dashboards or Enterprise Security. The Phosphorus Add-on for Splunk solves this. It provides search-time field extraction and Common Information Model (CIM) normalization for Phosphorus Spyglass events, so your xIoT/OT device inventory, firmware vulnerabilities (CVEs), and audit activity become first-class, CIM-compliant data in Splunk - ready for correlation searches, dashboards, and Enterprise Security data models with no custom parsing on your side.
Log in to report this app listing.