Getting Data In

How can i integrate Workspace one logs into Splunk?

Abhirup89
Explorer

Can someone guide me on ingestion of Workspace one logs into splunk

Tags (1)
0 Karma
1 Solution

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

View solution in original post

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

gregz00
Observer

Splunk HFW seems the best way to get this done.

But, has anyone figured out a way to use HEC Endpoint?

0 Karma

sheamus69
Communicator

What specific TA are you referring to?

0 Karma

rnishimoto
New Member

@sheamus69 I am also trying to ingest WorkspaceOne logs into Splunk. Were you able to find a specific TA that worked for this purpose?

0 Karma

rajashaey
Engager

Hi,

Anyone figured out the way to integrate please? 

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...