About the Splunk Enterprise Security Integration
Splunk Enterprise Security is the gold-standard SIEM platform used by security operations centers worldwide for threat detection, investigation, and response at enterprise scale. Part of Synqly’s Sink Unified API, the Splunk Enterprise Security integration enables security teams to stream security event data and integration telemetry from Synqly-connected tools into Splunk’s data pipeline via HTTP Event Collector (HEC) for indexing, analysis, and correlation. Integrate with Splunk Enterprise Security as a Sink to route security events from your Synqly integrations into Splunk ES, enriching your existing detection rules and investigation workflows with additional data sources.
Integration Use Cases
Post Events
Writes a batch of `Event` objects to the Sink configured with the token used for authentication.
