Installing and configuring the
CylancePROTECT
Application for
Splunk

Step	Action
	Review the CylancePROTECT Application for Splunk requirements.
	Install the CylancePROTECT Application for Splunk from the Splunk web app manager. If you want to install the CylancePROTECT Application for Splunk manually, see Install the CylancePROTECT Application for Splunk manually.
	Configure an event index.
	Configure the syslog data connection.
	Optionally, if you want to configure the syslog data connection over SSL, see Configuring the syslog data connection over SSL in Splunk.
	If you want the CylancePROTECT Application for Splunk to receive threat data reports, see Configure threat data reporting.