What does each app do?
- ThreatDown Visibility and Dashboard app provides pre-built Splunk dashboards of Nebula endpoint status data and the ability to build custom dashboards.
- ThreatDown Agentless Remediation app provides endpoint threat scans and removal with a dissolvable agent that leaves no impact on endpoint performance.
- Technical Add-on for ThreatDown is an app that allows Nebula to communicate with Splunk through Splunk’s Common Information Model format and provides integration with Nebula.
Where can I find more information and download the apps?
- For ThreatDown apps for Splunk, go to Splunkbase and search for ThreatDown.
- For Malwarebytes app for Splunk Phantom, log in to splunk>phantom with your Splunk Phantom credentials and search for Malwarebytes.
What are the app system requirements?
System requirements are posted in Splunkbase on each Nebula app Overview page.
Do I need to buy these apps?
There is no cost to use Nebula apps for Splunk. For more information, see the End User License Agreement posted on the Overview page for each app.
Who do I contact if I have an issue with the apps?
Submit a support ticket with our Business Support team.
What support is available for the apps?
Support for the apps are provided at the same level of service that you have for Nebula.
Where can I find installation and configuration documentation?
- Technical Add-on for ThreatDown for Splunk
- ThreatDown Agentless Remediation app for Splunk
- ThreatDown Visibility and Dashboards app for Splunk and Nebula
Which apps should I install for each Nebula Business product?
- The Technical Add-on app is a Nebula interface to Splunk Common Information Model. This app is required for all of ThreatDown integration.
- If you have Endpoint Protection, you should install the following apps:
- ThreatDown Dashboard and Visibility app
- Technical Add-on for ThreatDown
- If you have Incident Response, you should install the following apps:
- ThreatDown Add-on for ThreatDown
- Optional: ThreatDownDashboard and Visibility app if you perform lots of scans outside of Splunk.
- If you have Breach Remediation, you should install the following apps:
- ThreatDown Agentless Remediation app
- Technical Add-on for ThreatDown
- Optional: ThreatDown Dashboard and Visibility app if you perform lots of scans outside of Splunk.
How do I get started if I'm not a Nebula customer?
Contact Sales and request a trial of Nebula, then download the app from Splunkbase. An account manager will reach out to you for a custom-guided trial after you've signed up.
How do I get started if I'm not a Splunk customer?
You can download a free trial on Splunk's website.
Return to the Nebula integration with Splunk guide.