Cognito¶
Key facts¶
- MSG Format based filter
- Legacy BSD Format default port 514
Links¶
| Ref | Link |
|---|---|
| Technology Add-On for Vectra Cognito | https://splunkbase.splunk.com/app/4408/ |
Sourcetypes¶
| sourcetype | notes |
|---|---|
| vectra:cognito:detect | |
| vectra:cognito:accountdetect | |
| vectra:cognito:accountscoring | |
| vectra:cognito:audit | |
| vectra:cognito:campaigns | |
| vectra:cognito:health | |
| vectra:cognito:hostscoring | |
| vectra:cognito:accountlockdown |
Index Configuration¶
| key | sourcetype | index | notes |
|---|---|---|---|
| Vectra Networks_X Series | vectra:cognito:detect | main | |
| Vectra Networks_X Series_accountdetect | vectra:cognito:accountdetect | main | |
| Vectra Networks_X Series_asc | vectra:cognito:accountscoring | main | |
| Vectra Networks_X Series_audit | vectra:cognito:audit | main | |
| Vectra Networks_X Series_campaigns | vectra:cognito:campaigns | main | |
| Vectra Networks_X Series_health | vectra:cognito:health | main | |
| Vectra Networks_X Series_hsc | vectra:cognito:hostscoring | main | |
| Vectra Networks_X Series_lockdown | vectra:cognito:accountlockdown | main |