---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# TISC integration with Splunk

# TISC integration with Splunk {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

The integration between the Threat Intelligence Security Center (TISC) and Splunk enables users to filter and pull in relevant threat intelligence observables data into Splunk. Within the Splunk, the users can use this data to generate security alerts.
Role required: Splunk admin

Using the TISC add-on application, you can configure the interval at which you can pull observables from ServiceNow
TISC instance.

This interval determines how frequently the application can make requests to ServiceNow and retrieve the observables data. Also, you can define and apply filters to specify the observables that you want to pull from the ServiceNow
TISC instance.
Once the observables are pulled from ServiceNow, the observables data is stored in Splunk KV Store (Key-Value Store) and you can further write the correlation rules over the set of observables which were pulled in.