All Apps and Add-ons

Cisco AMP for Endpoints Config

merzinger
Splunk Employee
Splunk Employee

I am configuring the Cisco AMP for Endpoints input on our IDM instance.  When creating the input I am not able to specify the desired index for the data to go into.  My only options are main, summary, and history.  How do I specify my index?

Labels (1)
Tags (1)
0 Karma

merzinger
Splunk Employee
Splunk Employee

How would that allow me to specify an index?  The splunkbase app appears to not allow that.

0 Karma

diogofgm
SplunkTrust
SplunkTrust

Hi merzinger!
Have you tried to put the input into a private app and upload it? You need to pass the vetting but it should work. 

------------
Hope I was able to help you. If so, some karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...