DEPRECATION NOTICE: This Duo Splunk Connector will be deprecated 1-Sept-2025. Please update to the "Cisco Security Cloud" application on Splunkbase before this date (https://splunkbase.splunk.com/app/7404).
Duo Splunk Connector allows administrators to easily import their Duo logs into their Splunk environment.
Once configured, the connector automatically pulls in the following Duo logs for the last 7 days:
Activity Logs
Administrator Logs
Authentication Logs (v1 and v2)
Telephony Logs (v1 and v2)
Endpoint Logs
Trust Monitor Logs
The connector comes populated with default dashboards for the above logs. Administrators can create new dashboards or manipulate the existing dashboards.
Categories
IT Operations, Security, Fraud & Compliance
Resources
Log in to report this app listing