Security Performance Management
Continuous Monitoring
Cyber Insurance
National Cybersecurity

Articles in this section

Installing the Splunk Enterprise App and Add-on

Avatar
Ingrid
Follow
  • October 31, 2023: Refreshed instructions clarifying steps for the add-on and the app.
  • July 10, 2020: Published.

Refer to these instructions to install the Bitsight for SPM Splunk App solution and the Add-On.

Even if you want to use just the app, you will also need the add-on. Be sure to install the add-on first.

  • Add-On: Brings the data into Splunk.
  • App: Adds a visualization mode into the data that the add-on brings in.

Installing the Add-On

  1. Select +Find More Apps at the bottom of the Apps menu.
  2. Enter “Bitsight” into the search bar.
  3. Select Install for the Add-On option.
  4. Enter your splunk.com credentials in the Login and Install pop-up window.

    Splunk credentials are different from the SplunkCloud credentials.

  5. Select Agree and Install.
  6. The download will occur. Once it finishes, select Open the App in the Complete window to see the add-on in Splunk.
  7. Go to the Authentication tab [Configuration ➔ Authentication].
  8. Enter your Bitsight company API token then Save.
  9. Select Create New Input in the Inputs page.
    • SPM Input: Get your company and subsidiaries data.
    • Benchmarking input: Get benchmarking companies data.

  10. Select the SPM Input option and fill in the following fields:

    *Required.

    Field Description & Values
    Name* Enter a unique name for the data input.
    Interval*

    Time interval of input in seconds.

    Set this to 86400 as the Bitsight data is refreshed daily.
    Index* “default”
    Start Date  
    Companies* Select the companies for which you want to collect data.
  11. Select Add.

The data will take a few seconds to populate and you can now search for the raw data in the Search tab.

Installing the App

Make sure you’ve installed the add-on, which is what brings the data to the app.

  1. Select +Find More Apps at the bottom of the Apps menu.
  2. Enter “Bitsight” into the search bar.
  3. Select Install for the App option.
  4. Enter your splunk.com credentials in the Login and Install pop-up window.

    Splunk credentials are different from the SplunkCloud credentials.

  5. Select Agree and Install.
  6. The download will occur. Once it finishes, select Open the App in the Complete window to see the app in Splunk.

You can now select either your My Company or a My Subsidiary from the Company Name dropdown menu and visualize a set of pre-built dashboards with Bitsight data for it.

Related articles