Latest Version 3.6.0
June 30, 2025
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
CrowdStrike Falcon Event Streams Technical Add-On
This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform.
Built by CrowdStrike
Compatibility
Not Available
Platform Version: 10.0, 9.4, 9.3, 9.2
CIM Version: 6.x, 5.x
Rating
0
(0)
Log in to rate this app
Support
Developer Supported addon
Ranking
#33
in Security, Fraud & Compliance
This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform.
This add-on also is used to support the CrowdStrike Falcon App (https://splunkbase.splunk.com/app/5094/).
Categories
Created By
CrowdStrike
Type
addon
Downloads
60,715
Licensing
Splunk Answers
Resources
Log in to report this app listing