TISC add-on for Splunk overview

Configure the Threat Intelligence Security Center (TISC) integration with Splunk to import threat intelligence data, set up indicator collections, and analyze search matches using dashboards.

• TISC integration with Splunk
  The integration between the Threat Intelligence Security Center (TISC) and Splunk enables users to filter and pull in relevant threat intelligence observables data into Splunk. Within the Splunk, the users can use this data to generate security alerts.
• Creating users in ServiceNow TISC instance
  You can create users in the ServiceNow TISC instance with any valid user role: sn_sec_tisc.api_obs_read_access.
• Configure TISC add-on in Splunk
  Configure the TISC add-on in Splunk to connect your account, define data inputs, and pull observable records into the KV store for search and analysis.