Splunk integrations
DomainTools integrations for Splunk bring threat intelligence, domain monitoring, and investigation tools directly into your Splunk environment.
Available integrations
Section titled “Available integrations”Splunk Enterprise and Cloud
Section titled “Splunk Enterprise and Cloud”The DomainTools App for Splunk Enterprise and Splunk Cloud provides comprehensive threat intelligence and domain monitoring capabilities. This app integrates DomainTools’ Iris Enrich, Iris Investigate, Iris Detect, and Farsight DNSDB services into your Splunk deployment.
Key features:
- Real-time domain enrichment and threat scoring
- Automated monitoring and alerting
- Interactive dashboards for threat intelligence
- Domain investigation tools
- Passive DNS lookups with Farsight DNSDB
- Integration with Splunk Enterprise Security
Get started with Splunk Enterprise/Cloud →
Splunk SOAR
Section titled “Splunk SOAR”The DomainTools App for Splunk SOAR (Security Orchestration, Automation and Response) enables automated security workflows and playbook integration with DomainTools threat intelligence.
Learn about Splunk SOAR integration →
Need help?
Section titled “Need help?”For questions about DomainTools integrations with Splunk, contact DomainTools Enterprise Support.