Splunk

Overview

Use the Splunk add-on to export the logs from Saviynt Enterprise Identity Cloud (EIC). Saviynt generates audit logs that records all actions performed by an user such as changes to SAV role, changes to global configurations, changes to connections.

Saviynt Event Add-on provides customers the ability to extract audit and other events information from Saviynt's Enterprise Identity Cloud Platform. The add-on is developed by Saviynt community members and intended to make easier for Saviynt customer's to bring user activity and other identity related events into Splunk

Saviynt Events Add-on can be downloaded directly from Splunkbase 

Supported Features

This community integration is built leveraging Saviynt APIs and Azure Functions(Python), for additional details about Saviynt APIs visit  API Reference

Saviynt Enterprise Identity Cloud (EIC) generates audit logs that record all actions performed by a user such as changes to SAV roles, global configurations, and connections. These audit logs include the following entries: OBJECT TYPE, OBJECT NAME, ACTION, ATTRIBUTE, ACCESS BY, ACCESS TIME, IP ADDRESS, and MESSAGE. Sentinel Integration based on Azure Functions, periodically ingest these events. 

For details refer to documentation

Support

Community apps are provided "as is" with only basic troubleshooting and usage guidance available for our core frameworks or connectors (REST, SOAP, JDBC, LDAP, PowerShell, Extensions, Connector Framework or APIs). Customers are encouraged to seek support primarily through community channels. This includes Saviynt forums, user groups, and other community-driven platforms where members can share knowledge.

Provider Information 

This app was developed by members of the Saviynt Community.

Pricing

This app will count toward the number of apps included in your Saviynt license.