Netwrix Auditor 
Netwrix Enterprise Auditor 
Netwrix Data Classification 
Netwrix GroupID 
Netwrix Privilege Secure 
Netwrix Endpoint Protector 
Add-on for Splunk
Get the most from your Splunk investment! Integrate Netwrix Auditor with Splunk using our native, CIM-enabled add-on. (It’s free!)
Augment Splunk output with actionable details
Enjoy a clear user activity trail complete with who, what,
when and where details and before and after values, mapped
to the data models of the Splunk Common Information Model.
Investigate threats faster
The add-on’s native architecture and actionable audit data enable faster investigation of security
incidents, so you respond quickly and better determine how to prevent it from
happening again.
Maximize the ROI of your SIEM
Netwrix Auditor feeds Splunk with granular data, reducing the volume of indexed
data and making your SIEM
more cost-effective.
Learn how Netwrix Auditor Add-on for Splunk helps harden IT security and ensure uninterrupted services
Full integration via Splunk CIM data models
Easily interpret Netwrix Auditor’s actionable activity data, thanks to accurate mapping to authentication, change, email and endpoint CIM data models.
Quickly detect and respond to abnormal activity
See the full picture of all actions across all your critical systems with correlations of even slight deviations, so you can spot even complex threat patterns.
Get complete visibility across your infrastructure
Promptly detect suspicious activity and take action before your organization lands in the breach headlines. The native add-on provides fast API-to-API communication with Netwrix Auditor.
Quick Start Guide
Check out the Quick Start Guide to get detailed instructions
on how to install and configure the add-on for Splunk.
Extend Visibility Beyond SIEM
Learn how Netwrix complements your SIEM solution, helping you close these
gaps and avoid becoming the next data breach headline.