SOLUTION OVERVIEWTENABLE FOR SPLUNK

Enhance Operational Intelligencewith IT and OT Vulnerability Insights
Business Challenge
Technology Components• Tenable Vulnerability Management,Tenable Security Center, Tenable Web
App Scanning, Tenable OT Security,
Tenable Identity Exposure• Tenable Add-On for Splunk• Tenable Web App Scanning
Add-On for Splunk• Tenable.asm for Splunk• Splunk Enterprise• Splunk Cloud• Tenable App for Splunk (optional)• Splunk Enterprise Security (optional)• CIM 4.X

Key Benefits• Automatically sync Tenable data
into Splunk• Ensure all assets are known

Organizations depend on Splunk to harness operational IT, OT and
Active Directory (AD) data to detect and respond quickly to threats.
Without the ability to integrate critical vulnerability intelligence
into the Splunk platform, security leaders are at risk of weakening
incident investigations by not having full security context to take theright actions.

Solution
The Tenable® integrations with Splunk combine Tenable’s Exposure
insights with Splunk’s correlation capabilities for complete visibility
into all assets across the modern attack surface and their potential
vulnerabilities, misconfigurations and unpatched componentsin a unified threat detection, investigation, and response single
analytics platform. Using Tenable and Splunk together enables
joint customers to sync IT, OT and AD vulnerability information,prioritize vulnerability remediation based on actual risk, request a
remediation scan and view the latest vulnerability summary for amachine during an investigation.

Value
The Tenable integration for Splunk provides the ability to:• Automate closed-loop remediation• Discover additional hosts that were previously unknownto Splunk• Improve remediation decision makingwith vulnerability insights• Enrich existing events with vulnerability context andstate information• Centralize vulnerability alerting and reporting• Respond faster to the most critical vulnerabilities withPredictive Prioritization• Utilize Adaptive Response Actions with Splunk
Enterprise Security (optional)

Features

About Tenable

With this integration, you can:
• Sync vulnerability information, including state from Tenable platforms• Prioritize remediation based on the likelihood of a vulnerability
being exploited• Scan a host during an investigation• Request a remediation scan during an investigation(Tenable Security Center)• Get the latest vulnerability summary for a host during an investigation• View a single dashboard with configured vulnerability feeds

How it works
1.
TENABLEPLATFORMS
1HEAVY FORWARDER

Tenable Add-On for Splunk

2
4
INDEXER3

All vulnerabilities are gatheredfrom Tenable

2. Tenable data is indexed intoSplunk
3.

Tenable data is searchable andreportable in default Splunkreports and the Tenable Appfor Splunk

4. Adaptive Response actions canbe invoked to enrich Splunk
Enterprise notable events

SEARCH HEADTenable®️ is the ExposureManagement company.
Approximately 40,000 organizationsaround the globe rely on Tenable
to understand and reduce cyberrisk. As the creator of Nessus®️,Tenable extended its expertise invulnerabilities to deliver the world’s
first platform to see and secure
any digital asset on any computing
platform. Tenable customers include
approximately 60 percent of theFortune 500, approximately 40
percent of the Global 2000, and large
government agencies. Learn more at
www.tenable.com.

About Splunk
Splunk Inc. (NASDAQ: SPLK) is atechnology company that provides
the leading unified security andobservability platform. It helpsorganizations use data at any scale
to become more secure and resilient
so they can innovate with speed andagility. Learn more at splunk.com.

Tenable Add-On for Splunk
Tenable App for SplunkMore Information
Tenable Add-on and App for Splunk:www.splunkbase.splunk.com
Installation and configuration
documentation: docs.tenable.com/
integrations/Splunk/Content/
Welcome.htm
For support please visit:www.community.tenable.com/s/

TENABLE APP FOR SPLUNK VULNERABILITY DASHBOARDCOPYRIGHT 2024 TENABLE, INC. ALL RIGHTS RESERVED.
TENABLE, NESSUS, LUMIN, ASSURE, AND THE TENABLE
LOGO ARE REGISTERED TRADEMARKS OF TENABLE, INC.
OR ITS AFFILIATES. ALL OTHER PRODUCTS OR SERVICES
ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / Splunk Enterprise / 030624