Datalake2Splunk

This app provides the ability to ingest Orange Datalake threat intel given an api token. It replaces former app Datalake Connect (https://splunkbase.splunk.com/app/5463) to be able to pull data using a query hash obtained from Datalake thus having all filters available. A new version of Datalake API will be available during September 2025. Thus, a new addon has been created to allow a quick switch. https://splunkbase.splunk.com/app/7982 This app will be archived duting October 2025.