Log Integrations

Pull logs directly from your existing infrastructure — no file exports, no copy-paste from dashboards. Connect once, get a full MITRE ATT&CK timeline in seconds.

Splunk URLe.g. https://splunk.company.com:8089

Bearer TokenSettings → Tokens in Splunk Web

SPL Query

Max events

Credentials are sent directly to your backend — never stored or logged. The backend is open source.