Skip to main content
CrowdStrike Falcon Event Streams Technical Add-On app icon

CrowdStrike Falcon Event Streams Technical Add-On

This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform.Built by CrowdStrike
splunk product badge
Default Version 3.7.2

June 12, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3

CIM Version: 8.x, 6.x

Rating
3
(11)

Log in to rate this app

Support
Developer Supported
Ranking

#27 in Security, Fraud & Compliance

This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform. This add-on also is used to support the CrowdStrike Falcon App (https://splunkbase.splunk.com/app/5094/).