Getting Data In

How can i integrate Workspace one logs into Splunk?

Abhirup89
Explorer

Can someone guide me on ingestion of Workspace one logs into splunk

Tags (1)
0 Karma
1 Solution

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

View solution in original post

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

gregz00
Observer

Splunk HFW seems the best way to get this done.

But, has anyone figured out a way to use HEC Endpoint?

0 Karma

sheamus69
Communicator

What specific TA are you referring to?

0 Karma

rnishimoto
New Member

@sheamus69 I am also trying to ingest WorkspaceOne logs into Splunk. Were you able to find a specific TA that worked for this purpose?

0 Karma

rajashaey
Explorer

Hi,

Anyone figured out the way to integrate please? 

0 Karma
Get Updates on the Splunk Community!

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...