2. Configuring OPSWAT MetaAccess Splunk Add-on

This section guides you how to configure the add-on to collect data from your MetaAccess accounts.

Pre-requisites

  • Register an Application through your OPSWAT account and get the OAuth client key and client secret that is needed to configure the add-on. Please find details here on how to register an application that allows API calls.

  • Implement the required firewall rules to enable your Splunk Forwarder to make API calls to port 443 of your OPSWAT on-prem/cloud server.

  • Create an index (for example: opswat) that will be used to store the data retrieved by this add-on.