Download

Product brochure

A nine-page overview of TrackMe for Splunk: what it watches, the two ways of watching (entities and findings), Topology Studio, the AI layer, operating at scale and the editions.

TrackMe for Splunk Enterprise & Splunk Cloud

TrackMe for Splunk Enterprise & Splunk Cloud can be downloaded from Splunk Base, as well as from our release Website:

TrackMe App on SOAR

We provide a TrackMe application for Splunk SOAR (Phantom), this application for SOAR allows powerful actions to automate and interact with TrackMe straight from Splunk SOAR:

You can also access the source code and the releases from our GitHub repository:

TrackMe Broker

The TrackMe Broker add-on runs on a Heavy Forwarder on your side and carries TrackMe’s API calls from Splunk Cloud to destinations on your network. It can be downloaded from Splunk Base, as well as from our release Website, where each release sits next to its checksum:

For more information, see: TrackMe Broker, and Release notes: trackme-broker for what each release changed.

TrackMe Configuration Manager (TCM)

The TrackMe Configuration Manager (TCM) is a Splunk Application which can be used for CI/CD and configuration management purposes of TrackMe, it acts as a utility which can receive and replay configuration transactions, to promote changes between environments and also to restore configuration steps by replaying these, it can be downloaded from our release Website.

For more information about the TCM, see: Configuration Manager (CI/CD)

You can also access the source code and the releases from our GitHub repository:

TA-trackme-cribl

This Splunk application provides API integration between Splunk and Cribl API, it acts as an SPL interface to the Cribl API so you can even more interactions between the platforms, leverage real time requests from Splunk dashboard and also leverage it in TrackMe such as custom Flex Object trackers, it can be downloaded from:

You can also access the source code and the releases from our GitHub repository: