The Stamus Networks App for Splunk allows Splunk Enterprise users to extract information and insights from both the Stamus Security Platform and open source Suricata sensors.
I think you have to already create the local folder, all the other Splunk app have this. And it's can be cool to configure the token and IP of scirius with the interactive menu in the app directly in splunk, like a post-configuration, instead of going in cli :).
And add a test boutton to test the configuration.