{"id":2510,"date":"2022-08-26T05:02:00","date_gmt":"2022-08-26T05:02:00","guid":{"rendered":"https:\/\/dedicatedserverabr.kinsta.cloud\/?p=2510"},"modified":"2026-01-25T07:51:11","modified_gmt":"2026-01-25T07:51:11","slug":"splunk-integration","status":"publish","type":"post","link":"https:\/\/dedicatedserverabr.kinsta.cloud\/en\/blogs\/splunk-integration","title":{"rendered":"Splunk Integration"},"content":{"rendered":"\n

Ready to get started? Download the step-by-step guide below.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

A key selling point to Admin By Request is the valuable Auditlog data we collect. All significant security events, such as Requests for elevated privileges, software installs and uninstalls, and programs run as administrator, are logged in the Admin By Request User Portal further use if necessary.<\/p>\n\n\n\n

However, with large enterprises today generating gigabytes of data on a daily basis, it makes sense to provide the ability for our customers to manage this data in a tool of their choice \u2013 specifically, one designed for handling copious amounts of data from various different sources.<\/p>\n\n\n\n

Our latest integration for Splunk does just that.<\/p>\n\n\n\n

What the Integration Offers<\/h2>\n\n\n\n

This integration is simple: get Auditlog data sent in real-time from your User Portal to your Splunk environment to be indexed, structured, analyzed, and searched for your way.<\/p>\n\n\n\n

Never miss a beat with what\u2019s happening in terms of elevated privileges and access in your organization.<\/p>\n\n\n\n

Extra visibility, security, and insight without having to find your way around new software? Check \u2714<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

How It Works<\/h2>\n\n\n\n

This integration uses Splunk\u2019s HTTP Event Collection (HEC) functionality combined with Admin By Request webhooks. Get it going in three simple steps:<\/p>\n\n\n\n

    \n
  1. Set Up a Splunk HEC Channel \u2013 HEC is essentially an HTTP endpoint for your Splunk instance with an authorization token, which allows you to send data into Splunk.<\/li>\n\n\n\n
  2. Define Webhook in Admin By Request \u2013 With Admin By Request webhooks (also referred to as a web callback or HTTP push API) you can subscribe to events in real-time instead of pulling data out in intervals.<\/li>\n\n\n\n
  3. Receive Events \u2013 Auditlog events, such as Requests for elevated access, are now sent to the HEC endpoint.<\/li>\n<\/ol>\n\n\n\n

    Get started below with the self-service integration manual.<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    Something Amiss?<\/h2>\n\n\n\n

    If you’ve identified a bug or have a suggestion for this integration, head to the Contact page and let us know.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Get Auditlog data sent in real-time from your User Portal to your Splunk environment to be indexed, structured, analyzed, and searched for your way.<\/p>\n","protected":false},"author":2,"featured_media":2511,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[95,38,96,97,94,93],"ppma_author":[9],"class_list":["post-2510","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs","tag-auditlog","tag-data","tag-elevation","tag-http","tag-integration","tag-splunk","entry","has-media"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t