Getting Data In

How can i integrate Workspace one logs into Splunk?

Abhirup89
Explorer

Can someone guide me on ingestion of Workspace one logs into splunk

Tags (1)
0 Karma
1 Solution

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

View solution in original post

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

gregz00
Observer

Splunk HFW seems the best way to get this done.

But, has anyone figured out a way to use HEC Endpoint?

0 Karma

sheamus69
Communicator

What specific TA are you referring to?

0 Karma

rnishimoto
New Member

@sheamus69 I am also trying to ingest WorkspaceOne logs into Splunk. Were you able to find a specific TA that worked for this purpose?

0 Karma

rajashaey
Explorer

Hi,

Anyone figured out the way to integrate please? 

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...