Creating Token in Cyberint
In order to establish integration between Cyberint and Splunk via API, it is necessary to generate an API Token.
Authorization for access to the Cyberint API is granted through the use of API access tokens.

Access your Cyberint instance by visiting https://<yourcompany>.cyberint.io.
Click on your profile image, and select USER SETTINGS.
Click the three dots on the upper right-hand side, and select Generate API Token.
After generating the token, securely store it in a safe location.

Installation of Cyberint Argos Edge integration for Splunk (Cloud & On-prem):
Prerequisites:
Before you proceed with the installation of the Cyberint Argos Edge integration for Splunk, ensure that you have the following prerequisites in place:
Splunk Version: Your Splunk instance should be version 9.0 or later.
Cyberint Argos Edge Integration for Splunk Content Pack: Ensure you have obtained the necessary content pack.
Cyberint API Communication: Splunk should be able to communicate with your Cyberint API directly, typically on port 443.

** For Cloud instances User should install from Splunkbase.

Installation Steps (On-prem) -
1. Login into Splunk.
2. Click on the Manage Apps button inside the Apps sidebar.
3. Click on the “Install app from file” button in the upper right corner.
4. Click on “Choose File” and select the provided application file. Then, click on the “Upload” button.
5. The application should be installed! Go to the homepage and notice the new Cyberint tab
6. Inside the Apps sidebar.

Cyberint Argos Edge integration for Splunk Configuration:
Open the Cyberint App
Log in to your Splunk instance with administrator privileges.
In the Splunk Web Interface, click on "Apps" in the left-hand sidebar.
Locate and click on the " Cyberint Argos Edge V2 integration for Splunk" app to open it.

That's it! You've successfully configured the Cyberint App in Splunk to integrate threat intelligence data from Cyberint into your Splunk environment for improved security monitoring and analysis.

Cyberint Argos Edge V2 integration for Splunk

0