Splunk Enterprise Security
Notable events from Splunk ES, plus correlation-search coverage that shows which ATT&CK techniques you can actually detect.
What CMDash reads
- Incidents & alerts
- Maturity telemetry
Syncs only read from Splunk Enterprise Security. Some integrations also support write-back actions on Command and Enterprise plans, such as opening a ticket or deactivating a user.
How you connect
An API key or token you create in the vendor console and enter in CMDash.
Once connected, CMDash syncs it every 4 hours by default. What it finds maps to your controls through rules you install or write.
Where this fits in your frameworks
- ISO/IEC 42001:2023 — Incidents & alerts feeds Information for Interested Parties
- NIST AI Risk Management Framework 1.0 — Incidents & alerts feeds MANAGE
- NIST Cybersecurity Framework (1.1, legacy) — Incidents & alerts feeds Detect (DE)
- ISO/IEC 27001:2022 — Incidents & alerts feeds Technological Controls
- CIS Controls v8.1 — Incidents & alerts feeds Audit Log Management
- CMMC Level 2 — Incidents & alerts feeds Audit & Accountability
- CMMC Level 3 — Incidents & alerts feeds Incident Response
- FedRAMP Moderate — Incidents & alerts feeds Audit & Accountability
- HITRUST CSF v11 — Incidents & alerts feeds Information Security Incident Management
- SOX ITGC — Incidents & alerts feeds Computer Operations
- GDPR — Incidents & alerts feeds Security
- HIPAA Security Rule — Incidents & alerts feeds Technical Safeguards
- PCI DSS v4.0.1 — Incidents & alerts feeds Logging & Monitoring
- DORA — Incidents & alerts feeds Incident Management
- NYDFS Cybersecurity Regulation — Incidents & alerts feeds Audit Trail
This is where Splunk Enterprise Security’s data is documented as relevant on our framework pages — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
Also in SIEM & Detection
Ready to see your posture?
Start a 30-day free trial of any paid plan — a card is required, and it converts unless you cancel — or sign up for Free with no card at all.