Skip to main content

Splunk proof types and permissions

Written by Hyperproof Support
Updated this week

Note: Hyperproof connects to many third-party systems that frequently change, including the system interface. Contact your System Administrator or the third-party provider for assistance in meeting the requirements to integrate with Hyperproof and collect the proof you need.

Hyperproof supports Splunk Enterprise. Splunk Cloud may be supported with additional configuration. Contact your Splunk administrator to ensure that REST API access is enabled on port 8089.

When you create a Hypersync between Hyperproof and Splunk, you can automatically collect the following proof types:

Splunk proof types and fields

Proof type

Fields

Testable

List of Alerts

Title, Owner, App, Sharing, Status

Yes

List of Triggered Alerts

Time, Fired Alerts, App, Type, Severity, Mode

Yes

List of Users

Title, Authentication System, Full Name, Email Address, Time Zone, Default App, Default App Inherited From, Roles, Last Login, Status

Yes

Additional documentation

Certain cloud services offer specialized IP filtering options in their cloud consoles to lock down specific cloud API endpoints for security and compliance. You can use the Hyperproof static IP addresses to allow communication between Hyperproof Hypersyncs and your cloud service.

If your instance is on a private network, add the static IP address for the Hyperproof instance where your organization is hosted to your company's allowlist.

  • Hyperproof US IP addresses - 20.184.128.53, 52.9.169.38, 52.159.252.1

    Note: IP address 52.9.169.38 will be deprecated and replaced with 52.159.252.1 in the future. To prevent connectivity issues, it is recommended that you include all three IP addresses in your allowlists.

  • Hyperproof EU IP addresses - 9.141.172.46, 4.185.45.100

  • Hyperproof Gov IP addresses - 4.155.77.155, 4.155.78.5, 4.155.8.97

See Hyperproof instances for more information.​

Permissions

The account used to connect to Splunk must have the edit_user capability added to the associated role. The Admin role includes that capability by default. See Splunk platform capabilities for more information.​

Connection configuration

Authentication type: Custom​

Custom authentication parameters: Domain, UI Port Number, Rest API Port Number, Username, Password

Note: You only need to connect Hyperproof to the app once, and then you can create as many Hypersyncs as you need.

Additionally, you can create multiple Hypersyncs for a single control or label.

Did this answer your question?