Getting Data In

Extracting data from Elastic Search

gcusello
SplunkTrust
SplunkTrust

Hi at all,

I have to extract raw data from an Elastic Search infrastructure ingesting them in Splunk Enterprise 9.1.1.

I saw that there are two apps in Splunkbase: "ElasticSPL Add-on for Splunk" and "Elasticsearch Data Integrator - Modular Input".

The first seems to be not certified on Splunk Enterprise but only for Splunk Cloud.

Does anyone used them? are they different, which one should be prefereable?

Thank you for your advice.

Ciao.

Giuseppe

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...