This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform. This add-on also is used to support the CrowdStrike Falcon App (https://splunkbase.splunk.com/app/5094/).
(11)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources