Hi at all,
I have to extract raw data from an Elastic Search infrastructure ingesting them in Splunk Enterprise 9.1.1.
I saw that there are two apps in Splunkbase: "ElasticSPL Add-on for Splunk" and "Elasticsearch Data Integrator - Modular Input".
The first seems to be not certified on Splunk Enterprise but only for Splunk Cloud.
Does anyone used them? are they different, which one should be prefereable?
Thank you for your advice.
Ciao.
Giuseppe
