topic Re: What is the IP Address range in Splunk for Add-on integration? in Splunk Cloud Platform

What is the IP Address range in Splunk for Add-on integration?

Vijayalakshmi — Thu, 05 May 2022 15:34:42 GMT

Hi Team,

We want to do the IP allowlist in Crowdstrike. So we want to know the ip address range in Splunk to communicate with Crowdstrike through Falcon Event Streams Add-on

Re: What is the IP Address range in Splunk for Add-on integration?

VatsalJagani — Thu, 05 May 2022 16:07:20 GMT

@Vijayalakshmi - The Add-on uses CrowdStrike Event Stream API.

Here is what I found from Add-on's doc: https://www.crowdstrike.com/wp-content/uploads/2020/07/CrowdStrike-Falcon-Event-Streams-Add-on-Guide.pdf

The current base URLs for OAuth2 Authentication per cloud are: US Commercial Cloud : https://api.crowdstrike.com US Commercial Cloud 2 : https://api.us-2.crowdstrike.com US GovCloud : https://api.laggar.gcw.crowdstrike.com EU Cloud : https://api.eu-1.crowdstrike.com

I don't IP list though. You can try searching in the CrowdStrike forum. Or ask to CrowdStrike customer support directly.

I hope this helps!!!

Re: What is the IP Address range in Splunk for Add-on integration?

Vijayalakshmi — Thu, 05 May 2022 16:38:35 GMT

We are using IDM Splunk to hit the Crowdstrike Falcon Event Streams Add-on . Do we have any specific IP address range available for IDM Splunk Cloud?

We want the Splunk IP Address range, Can we get this from crowdstrike vendor?

Re: What is the IP Address range in Splunk for Add-on integration?

VatsalJagani — Thu, 05 May 2022 16:43:24 GMT

Ohh Okay Sorry. I thought otherway around.

For that please check with Splunk cloud support team.

Re: What is the IP Address range in Splunk for Add-on integration?

Vijayalakshmi — Thu, 05 May 2022 16:45:02 GMT

Thank you