Splunk.Es

Collection version 5.1.0

Description

Ansible Security Collection for Splunk Enterprise Security SIEM

Authors:

• Ansible Ecosystem Engineering team

• Ron Gershburg <rgershbu@redhat.com>

• Shahar Golshani <sgolshan@redhat.com>

Supported ansible-core versions:

• 2.17.0 or newer

• Issue Tracker
• Repository (Sources)

Plugin Index

These are the plugins in the splunk.es collection:

Modules

• splunk_adaptive_response_notable_events module – Manage Adaptive Responses notable events resource module

• splunk_correlation_search_info module – Gather information about Splunk Enterprise Security Correlation Searches

• splunk_correlation_searches module – Splunk Enterprise Security Correlation searches resource module

• splunk_data_inputs_monitor module – Splunk Data Inputs of type Monitor resource module

• splunk_data_inputs_network module – Manage Splunk Data Inputs of type TCP or UDP resource module

• splunk_finding module – Manage Splunk Enterprise Security findings

• splunk_finding_info module – Gather information about Splunk Enterprise Security Findings

• splunk_investigation module – Manage Splunk Enterprise Security investigations

• splunk_investigation_info module – Gather information about Splunk Enterprise Security Investigations

• splunk_investigation_type module – Manage Splunk Enterprise Security investigation types

• splunk_investigation_type_info module – Gather information about Splunk Enterprise Security investigation types

• splunk_notes module – Manage notes for findings, investigations, and response plan tasks

• splunk_notes_info module – Gather information about notes in Splunk Enterprise Security

• splunk_response_plan module – Manage Splunk Enterprise Security response plans

• splunk_response_plan_execution module – Apply response plans to investigations and manage tasks

• splunk_response_plan_execution_info module – Gather information about applied response plans on an investigation

• splunk_response_plan_info module – Gather information about Splunk Enterprise Security response plans

Httpapi Plugins

• splunk httpapi – HttpApi Plugin for Splunk

See also

List of collections with docs hosted here.