We are setting up Splunk RWI solution and have been request by the Splunk engineer to open ports 4443 and 4444 to allow comms to on-prem HF from their respective public endpoint URLs for Zoom and Teams data.
Given that both are cloud based data sources, I was wondering why this cant be done straight on the IDM itself ?
As far as I know the add-on should be Splunk Cloud supported in order to work on IDM. Both the Zoom addon https://splunkbase.splunk.com/app/4961/ and the Teams addon https://splunkbase.splunk.com/app/4994/ seem to be Cloud supported. I think you should be able to request an install of these addons on your IDM at Splunk support. Then you can configure the inputs on IDM I suppose.