https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472570#M81203 <P>why should i install the add-ons in splunk? <BR /> collecting data would work the same without it?<BR /> Compared to qradar SIEM they are like dsm?</P> Thu, 31 Oct 2019 09:02:49 GMT dani9 2019-10-31T09:02:49Z https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472570#M81203 <P>why should i install the add-ons in splunk? <BR /> collecting data would work the same without it?<BR /> Compared to qradar SIEM they are like dsm?</P> Thu, 31 Oct 2019 09:02:49 GMT https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472570#M81203 dani9 2019-10-31T09:02:49Z https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472571#M81204 <P>You don't have to install Splunk add-ons. Data onboarding works fine without them. If you like re-inventing the wheel, then skip the add-ons and do your own data ingestion. To save time, however, use the add-ons.</P> Thu, 31 Oct 2019 13:01:00 GMT https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472571#M81204 richgalloway 2019-10-31T13:01:00Z https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472572#M81205 <P>And so spontaneously i question: what's for that? when it is better to install it?</P> Thu, 31 Oct 2019 13:18:16 GMT https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472572#M81205 dani9 2019-10-31T13:18:16Z https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472573#M81206 <P>Add-ons are pre-packaged configurations that help onboard data and/or present it (they can do other things as well). Installing an add-on is like installing open-source software on your computer. Sure, you could write your own code to do the same thing, but why do that when someone else has already solved the problem for you?</P> Thu, 31 Oct 2019 14:35:30 GMT https://community.splunk.com/t5/Getting-Data-In/ADD-ON-uses/m-p/472573#M81206 richgalloway 2019-10-31T14:35:30Z