https://community.splunk.com/t5/Splunk-Cloud-Platform/Intune-Integration/m-p/705513#M3400 <P>That connector is for Splunk SOAR, the SOAR product offered by Splunk. It will not work with Splunk Enterprise, the SIEM product offered by Splunk.</P><P>Currently it seems the go-to way to get intune logs into Splunk is to send them to a Microsoft Event Hub, and then use the Splunk Add-on for Microsoft Cloud Services to ingest them into Splunk.</P><P><A href="https://splunkbase.splunk.com/app/3110" target="_blank">https://splunkbase.splunk.com/app/3110</A></P> Thu, 28 Nov 2024 18:33:32 GMT marnall 2024-11-28T18:33:32Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Intune-Integration/m-p/705483#M3399 <P>how to integrate microsoft intune in splunk using the connector downloaded from <A href="https://splunkbase.splunk.com/app/7074" target="_self">splunk base</A>&nbsp;</P> Thu, 28 Nov 2024 14:19:12 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Intune-Integration/m-p/705483#M3399 sc_admin12 2024-11-28T14:19:12Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Intune-Integration/m-p/705513#M3400 <P>That connector is for Splunk SOAR, the SOAR product offered by Splunk. It will not work with Splunk Enterprise, the SIEM product offered by Splunk.</P><P>Currently it seems the go-to way to get intune logs into Splunk is to send them to a Microsoft Event Hub, and then use the Splunk Add-on for Microsoft Cloud Services to ingest them into Splunk.</P><P><A href="https://splunkbase.splunk.com/app/3110" target="_blank">https://splunkbase.splunk.com/app/3110</A></P> Thu, 28 Nov 2024 18:33:32 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Intune-Integration/m-p/705513#M3400 marnall 2024-11-28T18:33:32Z