Skip to content

Cognito

Key facts

  • MSG Format based filter
  • Legacy BSD Format default port 514
Ref Link
Technology Add-On for Vectra Cognito https://splunkbase.splunk.com/app/4408/

Sourcetypes

sourcetype notes
vectra:cognito:detect
vectra:cognito:accountdetect
vectra:cognito:accountscoring
vectra:cognito:audit
vectra:cognito:campaigns
vectra:cognito:health
vectra:cognito:hostscoring
vectra:cognito:accountlockdown

Index Configuration

key sourcetype index notes
Vectra Networks_X Series vectra:cognito:detect main
Vectra Networks_X Series_accountdetect vectra:cognito:accountdetect main
Vectra Networks_X Series_asc vectra:cognito:accountscoring main
Vectra Networks_X Series_audit vectra:cognito:audit main
Vectra Networks_X Series_campaigns vectra:cognito:campaigns main
Vectra Networks_X Series_health vectra:cognito:health main
Vectra Networks_X Series_hsc vectra:cognito:hostscoring main
Vectra Networks_X Series_lockdown vectra:cognito:accountlockdown main