Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

[srideviv]

Which port will be used to integrate Tanium and Splunk using "Tanium Splunk Application" add-on, inorder to get the data from Tanium to Splunk Enterprise?

[sumanssah]

As per details from Tanium website, you can do the integration with Syslog and send data to 514 port of Splunk.

I assume you already started and invested time with Tanium-Splunk integration, would suggest checking below-mentioned URL (which may be helpful with your integration)

https://docs.tanium.com/connect/connect/siem.html

[srideviv]

Thank u for the response. I tried using tcp:9997 and it worked. 🙂