Getting Started

The following is a high-level overview of how to install and configure the app for the first time.

1. Review the Role-Based Permissions topic to determine if you have the required permissions to install and configure the app.
2. Determine your deployment environment.  How and where you install the App and Add-On will differ based on your individual environment.  See the Deployment Methods topic for more details.
3. Determine which Splunk matching model you intend to use.  See the Supported Matching Modes topic for more details.
4. Install and configure the App and Add-On.  See the Installing the Add-On Component and Installing the App Component topics for more details.

   You may see authentication errors as you install and configure the components. These errors will occur until you have completed install and configuration of both components.

5. Set up your Inputs in the App component in order to pull ThreatQ Indicator Exports.  See the Creating a New Input topic for more details.