- This Add-on is intended to be installed on Search Heads.
- This Add-On is intended to be installed on Search Heads.
- Require Add-on "SailPoint IdentityNow AuditEvent Add-on" (https://splunkbase.splunk.com/app/4088/) to be installed on Splunk Cloud IDM or Splunk Heavy Forwarder and Indexers to pull data.
- Is recommended to use separate index.
- CIM field compliant
- Include event types and tags
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.