THOR Add-on

UPDATE 19.09.2017: There's a new version of this Aadd-on available for Splunk v6 that has no backward compatibility with this version of the Add-on - you can find it here https://splunkbase.splunk.com/app/3718/ The THOR Add-on contains all event types, field extractions, transforms, tags and lookups for the THOR Splunk App. If you use Splunk as a simple Syslog Receiver you have to install the new THOR Add-on and the new THOR App on that system. If you use Splunk Forwarders to collect your data, you can now deploy the THOR Add-on on the Forwarders with the Deployment Manager and the lightweight THOR App on the Search Head.