splunk
ESET PROTECT Platform
Overview
Details
Plugin for gathering detections from ESET PROTECT and ESET Inspect to Splunk Enterprise
ESET PROTECT is an XDR cybersecurity platform that combines next-gen prevention, detection, and proactive threat-hunting capabilities. ESET's highly customizable solutions include local support and have minimal impact on performance, identify and neutralize known and emerging threats before they can be executed, support business continuity, and reduce the cost of implementation and management.
Integrating the ESET PROTECT Platform with Splunk Enterprise empowers users to efficiently monitor and manage threat detections while enhancing overall organization security. The ESET PROTECT Platform data connector uses ESET Connect API to pull detection logs into Splunk.
ESET PROTECT is an XDR cybersecurity platform that combines next-gen prevention, detection, and proactive threat-hunting capabilities. ESET's highly customizable solutions include local support and have minimal impact on performance, identify and neutralize known and emerging threats before they can be executed, support business continuity, and reduce the cost of implementation and management.
Integrating the ESET PROTECT Platform with Splunk Enterprise empowers users to efficiently monitor and manage threat detections while enhancing overall organization security. The ESET PROTECT Platform data connector uses ESET Connect API to pull detection logs into Splunk.
The added value
Integration of the ESET PROTECT Platform and Splunk enables users to ingest the detection data from ESET PROTECT and ESET Inspect to the Splunk instance. The detection data is pulled from the ESET Public API with the time interval specified by the user and saved into a log file on the Wazuh side.
Integration type
- API-based integration
Prerequisites
- The ESET Connect API user account must be created.
- https://help.eset.com/eset_connect/en-US/create_api_user_account.html
Release Notes
Version 0.1.1
April 18, 2025
Version 0.1.0
April 17, 2025