What this integration does
The Splunk integration works in both directions. Log imports from Splunk search exports help AxiSentinel show AI traffic in your environment, and AI control events such as holds, blocks and stops are sent to Splunk. Analysts gain AI context in the platform where they already investigate security incidents.
Benefits
Use cases
Joining agent blocks to fraud cases
A bank's fraud investigators work in Splunk. Blocks and holds from AxiSentinel appear beside their other events, helping them see whether an agent's refused action relates to the wider case.
AI calls in clinical network logs
A hospital keeps its network logs in Splunk. An export gives AxiSentinel a view of AI traffic across those logs, helping the security team find AI use that nobody registered.
A searchable trail for reviewers
An insurer's internal reviewers want to see how agents were controlled. Holds, blocks and stops in Splunk give them a searchable trail in a tool the security team already runs.
Coverage is confirmed for your environment during onboarding. Product names belong to their owners and are used only to describe a technical connection.
