https://community.splunk.com/t5/Splunk-Search/Endpoint-protection-options-that-are-Splunk-friendly/m-p/484994#M193496 <P>I would recommend using "<STRONG><EM>Windows Event Logs Analysis</EM></STRONG>" app, this gives a good view of windows infrastructure </P> <P><A href="https://splunkbase.splunk.com/app/3067/">https://splunkbase.splunk.com/app/3067/</A></P> Mon, 02 Mar 2020 19:09:59 GMT sumanssah 2020-03-02T19:09:59Z https://community.splunk.com/t5/Splunk-Search/Endpoint-protection-options-that-are-Splunk-friendly/m-p/484993#M193495 <P>All, </P> <P>We're reselecting our endpoint protection for Windows Servers and Workstation. I'd like to start with solutions that speak splunk or have good Splunk apps. That is to say, good logs, CIM, tags, great apps that can go into Splunk relatively easy. </P> <P>Obviously Splunk isn't the only measure of success here, but it's one element we're looking at. Any recommendations? </P> Mon, 02 Mar 2020 18:07:31 GMT https://community.splunk.com/t5/Splunk-Search/Endpoint-protection-options-that-are-Splunk-friendly/m-p/484993#M193495 daniel333 2020-03-02T18:07:31Z https://community.splunk.com/t5/Splunk-Search/Endpoint-protection-options-that-are-Splunk-friendly/m-p/484994#M193496 <P>I would recommend using "<STRONG><EM>Windows Event Logs Analysis</EM></STRONG>" app, this gives a good view of windows infrastructure </P> <P><A href="https://splunkbase.splunk.com/app/3067/">https://splunkbase.splunk.com/app/3067/</A></P> Mon, 02 Mar 2020 19:09:59 GMT https://community.splunk.com/t5/Splunk-Search/Endpoint-protection-options-that-are-Splunk-friendly/m-p/484994#M193496 sumanssah 2020-03-02T19:09:59Z