Splunk Add-on for Github

The Splunk Add-on for GitHub enables the collection of logs and events from GitHub Enterprise Server and GitHub Enterprise Cloud. The Splunk Add-on for GitHub lets you collect audit logs from the GitHub Enterprise Server (GHES) using the Log Forwarding mechanism of GitHub and extracts useful information out of it. It can also fetch the audit logs for organization and enterprise account types and user metadata events of an organization from the GitHub Cloud. The add-on also fetches Code Scanning Alerts from GitHub Cloud, which enables users to collect those alerts from organization or enterprise account types in Splunk and normalize them using CIM data models