Does the Rapid7 Nexpose Technology Add-On for Splunk - https://splunkbase.splunk.com/app/3457/#/overview - require a forwarder be installed on Rapid7 servers in the Enterprise? The details in the description do not indicate if a forwarder is needed, but earlier versions did require such.
Hi @pirrellob, no forwarders are required for this Tech Add-On. The Tech Add-On queries Nexpose.
We have another product for Incident Detection and Response called InsightIDR. You use forwarders to forward from Splunk into InsightIDR.