The CrowdStrike Falcon Identity Protection Add-on for Splunk Add-on allows ingestion of the CrowdStrike identity data into Splunk enabling the data to be used with other Splunk Apps, such as Enterprise Security.
I am currently ingesting other CS data from an SQS AWS Bucket not directly from CS can the app do that or does it need to directly pull this data from CS?
Description
I am currently ingesting other CS data from an SQS AWS Bucket not directly from CS can the app do that or does it need to directly pull this data from CS?
Thank you
Related links