Skip to main content

Coro via HEC

Coro via HEC is an application template in the Endpoint Management category of the Application Catalog. Its card describes it as Data input from Coro Cybersecurity via Splunk-compatible HEC. Installing it from the form below adds an application to Applications. Its template ID, CoroHEC, is the one listed on Application Templates.

Menu path: Applications → Install Application → Coro via HEC · URL path: /v2/applications/install?template=CoroHEC

Install Coro via HEC form with the Application section's Instance name and Display name fields, above Cancel, Dry run and Install Application

Application​

The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.

FieldTypeRequiredDefault
Instance nameTextYesdefault
Display nameTextYesDefault

Configuration​

The Coro via HEC form has no Configuration section: the template takes no settings beyond the application's names.

Install​

Install Application installs Coro via HEC with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.