{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":45589,"path":"security-management/threat-intelligence-security-center/tisc-get-sighting-configs.md","title":"Get started with Sighting Search Configurations","bundle":null,"doc_type":null,"release":"australia","body":"\n# Get started with Sighting Search Configurations\n\nSighting Search Configurations define how threat intelligence data is searched and matched against your environment. Configure these settings to customize threat detection and improve security monitoring accuracy.\n\nThe Elasticsearch and Splunk Sighting Search integrations enrich observables with sighting information from your log data. Elasticsearch searches logs to add relevant sightings directly to observables, while Splunk searches, monitors, and analyzes machine-generated data across Security Operations. Download the Splunk Sighting Search integration from the ServiceNow Store.\n\n-   **[Configure and enable Elasticsearch integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-elasticsearch-integration.md)**  \nElasticsearch is a distributed, RESTful search and analytics engine that easily integrates with Security Operations.\n-   **[Configure and enable Splunk integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-splunk-integration.md)**  \nConfigure the Splunk Enrichment integration to automatically search your logs and add relevant sighting information to threat intelligence data.\n-   **[Configure CrowdStrike NextGen SIEM sighting search](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-crowdstrike-ngsiem-integration.md)**  \nConfigure the CrowdStrike NextGen SIEM integration with your Falcon API credentials so that analysts can search CrowdStrike log data for activity that matches an observable.\n\n**Parent Topic:**[Configure Sighting Search](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/configure-sighting-search.md)\n\n"}}