topic Re: FIPS mode Support for Splunk Add-on for Salesforce on IDM in Getting Data In

FIPS mode Support for Splunk Add-on for Salesforce on IDM

timothylindt — Tue, 24 Sep 2024 14:21:16 GMT

Could the Splunk Add-on for Salesforce team clarify whether FIPS mode is supported?

Per https://docs.splunk.com/Documentation/AddOns/released/Overview/Add-onsandFIPsmode it seems certain Add-on do but there doesn't seem to be a definitive list of what supports it and what doesn't.

Re: FIPS mode Support for Splunk Add-on for Salesforce on IDM

marnall — Mon, 30 Sep 2024 19:29:26 GMT

It is a Splunk Supported add-on, so if you have a support contract then you could ask them.

Re: FIPS mode Support for Splunk Add-on for Salesforce on IDM

inventsekar — Tue, 01 Oct 2024 00:05:01 GMT

Hi @timothylindt
My two cents here:
1) if the Salesforce Add-on does not support FIPS, then Splunk doc team should have updated on the add-on docs (the opposite is what happened in this case - if its supporting, then many times they forget to mention it)
2) if this issue impacted previous Splunk Admins, then they should have asked this question(as the SalesForce is a popular app)

3) if the FIPS is not supported by the add-on, then you can contact Splunk Support as the Add-on is a Splunk Supported Add-on.

Some detailed for other Splunk newbies about the FIPS:

FIPS - Federal Information Processing Standards (FIPS)

THP - Transparent Huge Pages (as some users may get confused with FIPS and THP)

How to enable FIPS, how to verify, etc
https://docs.splunk.com/Documentation/Splunk/9.3.1/Security/SecuringSplunkEnterprisewithFIPS