Archive2

How can I send historical data from Splunk to QRadar (On Prem and On Cloud)

Engager

Hello,

I need to know how to send historical data from Splunk to QRadar (Version 731)
I am aware that there are some settings in Splunk which can forward the data to external destinations but don't know if that is raw or normalized data.

Thanks in advance.

Tags (2)