Distributed integration scheme (Splunk)

This section contains instructions for integrating Kaspersky CyberTrace and Splunk in the distributed integration scheme.

For a description of the integration process, see section "Integration guide (Splunk)".

For a description of distributed integration scheme, see section "About the distributed integration scheme".

In this section

About the distributed integration scheme

Step 1. Installing Forwarder and Search Head apps

Step 2. Configuring Forwarder and Search Head apps (distributed deployment)

Step 3 (optional). Configuring the lookup script (distributed deployment)

Step 4. Performing the verification test (Splunk, distributed integration)

Page top