Required User Role: Administrator


Required User Role: Security Manager, Security Analyst, or Vulnerability Analyst

Before you begin:

  • You must have Splunk downloaded on your system with a Splunk basic login.

Note: See the Splunk Environments section for additional information about the different types of Splunk deployments and their requirements.

Note: If you install the Tenable App for Splunk on the search head, you must also install the Tenable Add-on.

To install via the Splunk User Interface:

  1. Log in to Splunk.
  2. Go to Apps at the top of the screen.

    A drop-down menu appears.

  3. Click Manage App.

  4. In the search bar, type Tenable.

    Tenable-related options appear:

  5. Click Launch App for the Tenable application you want to install.

  6. Follow the Splunk prompts to launch the application.

Note: Restart Splunk after installing the Tenable App or Tenable Add-On.

Note: You may need to update the Tenable Macro, get_tenable_index, for data to begin populating the application dashboards.

Next, configure the Tenable application.