How to integrate Crowdstrike with Splunk?

Getting Data In

I am looking for an add-on/API which can help to onboard all crowdstike related information to splunk.

I see that there is "CrowdStrike Falcon Devices Technical Add-On" available, it retrieves detailed data that the CrowdStrike Falcon sensor has collected about the device.

It does not collect the list of software installed on those devices.

For example,

We have 5000+ windows servers, and I want to check if XYZ software is installed or not !

Is there a way to collected installed software related info into splunk ?

Many thanks in advance!

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...