Does the latest version of Splunk App for Salesforce no longer require Splunk Cloud?

[nychawk]

Aside from requiring for test driving purposes, I am not reading it is required otherwise.

Will the latest version now work with on prem Splunk Enterprise?

[ehaddad_splunk · Accepted solution]

we just opened it up for download to onprem customers through splunkbase as of last week.

[nychawk]

Great news, thank you Elias!

Just in time for my own deployment. I am running on a SHC across multi site idx's, anything to look out for?

[nychawk]

Elias;

The online documentation still refers to Splunk Cloud, step 2. I assume I can safely ignore this step for on-prem Splunk?

Thank you.

[ehaddad_splunk]

updated the doc but yeah you can ignore.
Thank you for bringing this to my attention

[nychawk]

I was unable to install on my search head cluster, installed instead on a heavy forwarder; I do not anticipate issues, do you?

Also, I need to configure access to SF via a proxy, I recall somewhere, not sure if it was for this app, a how to for modifying the python scripts to traverse to SF via a proxy. Can you assist?

TY

[ehaddad_splunk]

Should not. hasn't been tested on cluster.

[nychawk]

I guess I will be testing for you 😉

Any suggestions for how to alter or setup use of a proxy for reaching SF?

[esix_splunk]

Sales Force App has always been available for on-prem Splunk Enterprise.

https://splunkbase.splunk.com/app/1931/

[nychawk]

Nope, required Cloud...