topic Re: two DUO consoles uploading to splunkcloud in Other Usage

two DUO consoles uploading to splunkcloud

soh_tax_rna — Thu, 08 Feb 2024 01:35:22 GMT

Is it possible to attach two DUO consoles to the splunk API - we have a standard console and are soft migrating to DUO Federal, and would like visibility/ ingestion for both in Splunk: We see the option to edit the DUO Splunk connector, not add a second one. Thank you!

Re: two DUO consoles uploading to splunkcloud

richgalloway — Fri, 09 Feb 2024 13:18:52 GMT

Consider installing a second copy of the connector. You will need to put it in a different directory and will have to edit app.conf, but it should allow for a second connection to DUO. Installing a second copy of an app should be done from the CLI.

Re: two DUO consoles uploading to splunkcloud

soh_tax_rna — Mon, 12 Feb 2024 20:11:24 GMT

thank you - this would work as well: we are now going the old data fall out of dashboard and be updated with data from the new DUO site. You can have data ingested from multiple DUO APIs in the dashboard concurrently, so we have visibility from both sites on the same dashboard, but consolidated. Appreciated!