Installing the Splunk Enterprise App and Add-on

Refer to these instructions to install the Bitsight for SPM Splunk App solution and the Add-On.

How to install the Splunk app

• Add-On: Brings the data into Splunk.
• App: Adds a visualization mode into the data that the add-on brings in.

Installing the Add-On

1. Select +Find More Apps at the bottom of the Apps menu.
2. Enter “Bitsight” into the search bar.
3. Select Install for the Add-On option.
4. Enter your splunk.com credentials in the Login and Install pop-up window.

   Splunk credentials are different from the SplunkCloud credentials.

5. Select Agree and Install.
6. The download will occur. Once it finishes, select Open the App in the Complete window to see the add-on in Splunk.
7. Go to the Authentication tab [Configuration ➔ Authentication].
8. Enter your Bitsight company API token then Save.
9. Select Create New Input in the Inputs page.
   • SPM Input: Get your company and subsidiaries data.
   • Benchmarking input: Get benchmarking companies data.
10. (Optional) Check the Skip checkpoint checkbox in the Inputs page to skip the checkpoint and load all findings. Though there will be duplicates and more data using storage, this can be useful if your system deletes data after a certain number of days.

11. Select the SPM Input option and fill in the following fields:

    * Required.

    Name

    * Required.

    Enter a unique name for the data input.

    Interval

    * Required.

    Time interval of input in seconds.

    Set this to 86400 as the Bitsight data is refreshed daily.

    Index

    “default”

    Start Date

    The start date.

    Companies

    * Required.

    Select the companies for which you want to collect data.

12. Select Add.

The data will take a few seconds to populate and you can now search for the raw data in the Search tab.

Installing the App

Make sure you’ve installed the add-on, which is what brings the data to the app.

1. Select +Find More Apps at the bottom of the Apps menu.
2. Enter “Bitsight” into the search bar.
3. Select Install for the App option.
4. Enter your splunk.com credentials in the Login and Install pop-up window.

   Splunk credentials are different from the SplunkCloud credentials.

5. Select Agree and Install.
6. The download will occur. Once it finishes, select Open the App in the Complete window to see the app in Splunk.

You can now select either your My Company or a My Subsidiary from the Company Name dropdown menu and visualize a set of pre-built dashboards with Bitsight data for it.