Twistlock is a cloud native cybersecurity platform for hosts, containers, and serverless setups that ensures the protection of all your workloads across any environment.
The Sumo Logic App for Twistlock provides a comprehensive monitoring and analysis solution for detecting vulnerabilities and potential threats within your Kubernetes and containerized environments.
The Twistlock Apps work on logs from:
Twistlock Console: Console logs typically include image scan, host scan, container scan, registry scan, scan summary, management audits, compliance violations, and vulnerability issues events.
Twistlock Defender: Defender logs typically include container/host runtime audits, process activity audits, and incident events
For more information on Twistlock events, refer to the Twistlock Documentation.
For Kubernetes customers, we recommend installing the Twistlock App.
For non-Kubernetes customers, we recommend installing the Twistlock Classic App.