Getting Data In

Extracting data from Elastic Search


Hi at all,

I have to extract raw data from an Elastic Search infrastructure ingesting them in Splunk Enterprise 9.1.1.

I saw that there are two apps in Splunkbase: "ElasticSPL Add-on for Splunk" and "Elasticsearch Data Integrator - Modular Input".

The first seems to be not certified on Splunk Enterprise but only for Splunk Cloud.

Does anyone used them? are they different, which one should be prefereable?

Thank you for your advice.



Labels (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...