Does the Rapid7 Nexpose Technology Add-On for Splunk require a forwarder be installed on Rapid7 servers?

[pirrellob]

Does the Rapid7 Nexpose Technology Add-On for Splunk - https://splunkbase.splunk.com/app/3457/#/overview - require a forwarder be installed on Rapid7 servers in the Enterprise? The details in the description do not indicate if a forwarder is needed, but earlier versions did require such.

[jonathan_stewar]

Hi @pirrellob, no forwarders are required for this Tech Add-On. The Tech Add-On queries Nexpose.
We have another product for Incident Detection and Response called InsightIDR. You use forwarders to forward from Splunk into InsightIDR.

Also, if you would like a pre-built dashboard for the Nexpose data we have the dashboard app: https://splunkbase.splunk.com/app/3492/

Jonathan (Rapid7).