How to load Sysmon json to splunk enterprise?

Getting Data In

Hi,

I have a json of Sysmon logs.

I want to load it locally to splunk enterprise but I faced some difficulties.

I downloaded Splunk Add-on for Sysmon but have no idea what I should do next.

Thank you in advanced!

Get Updates on the Splunk Community!

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Join the Conversation