- First we have to be a admin in order to integrate with Splunk. We can integrate with a non-admin account if we have a "Dev Console".
- We need to create a app in "Dev console" of Box account. To do so we need to login to box using developer console link.(Just Google "Box developer console")
- Create a new app here as follows...
- Select the appropriate way of authentication.
- Name the app as you wish, in my case I am giving Splunk
- Click on create app.
- Please make sure your screen looks like this.
- Now copy the Client ID and Client Secret.
- Install Splunk add-on for Box in your splunk instance.
- Open the add-on.
- Add box account credentials in the configuration tab as shown below.
- Enter you client ID and client secret and specify some unique name.
- Now add the input, and click add.
- A pop up will appear showing an error, which will contain a url as follows...
- Copy the highlighted url and add it to the redirect url in box app.
- Once you add the input after adding the url you should be able to see the above window, now grant access and close the windows.
- Once you save the configuration you should add the inputs in the Splunk add-on.
- Add the inputs to box account, from location shown in the above screenshot.
- After you add inputs, you should be able to see the box logs in splunk.
