XDR or SPLUNK integration with SOC

[AYEN]

Hi,

   I started studying XDR and Splunk solution in cisco meraki but i can't visualize how to integrate these solution with SOC server for their visibility. Can anyone tell me where the SOC server should connect. These is to visualize hows the flow of that solution.

[alemabrahao]

Splunk is for visibility, dashboards, and alerts.
The XDR Platform is for incident response, threat intelligence, and correlation. Optionally, the Merak Dashboard/API is for direct device visibility or configuration.

[PhilipDAth]

I'm not completely sure of your question.

You can use the Cisco Meraki Add-on for Splunk.

https://splunkbase.splunk.com/app/5580

You can also use Splunk Connect for Syslog.

https://splunkbase.splunk.com/app/4740