Install

Perform the following tasks to install and configure the Anvilogic app.

  1. Ensure Connectivity

    The server must be able to connect to https://secure.anvilogic.com over port 443

  2. Download the App Download the Anvilogic App from the platform at https://secure.anvilogic.com -> Admin Settings -> Download Anvilogic App

  3. Install the App Install the app on your server, preferably the server that has access to security indexers/data. This requires a restart.

  4. Create Index Create an index "anvilogic" index. Those names are recommended but you can change them to match any naming standards you have.

  5. Assign Roles Assign yourself the avl_admin role and anyone else participating in the pilot, app roles and descriptions are in the document attached for reference.

  6. Create HEC Token Create a HEC token that can write to the 1 anvilogic index that was created. Ensure the search head has network connectivity to the box that has the HEC Collector enabled.

For Splunk Cloud Customers: Splunk Cloud Enterprise Security customers will have to allow IPs to send to the Splunk Cloud HEC endpoint on port 443. This setting still requires are a HEC token for authentication and is often used by customers to send data to Splunk Cloud from multiple devices with changing IPs like mobile devices.

Last updated