Getting Data In

How can i integrate Workspace one logs into Splunk?

Abhirup89
Explorer

Can someone guide me on ingestion of Workspace one logs into splunk

Tags (1)
0 Karma
1 Solution

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

View solution in original post

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

gregz00
Observer

Splunk HFW seems the best way to get this done.

But, has anyone figured out a way to use HEC Endpoint?

0 Karma

sheamus69
Communicator

What specific TA are you referring to?

0 Karma

rnishimoto
New Member

@sheamus69 I am also trying to ingest WorkspaceOne logs into Splunk. Were you able to find a specific TA that worked for this purpose?

0 Karma

rajashaey
Explorer

Hi,

Anyone figured out the way to integrate please? 

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...