I'd check your documentation - apparently there's a SIEM Integration Guide with a section on Integration with Splunk.
I'd need a login at the change auditor site in order to see the details (which you should have if you own the software), but the little that I see when I search their KBase tells me mostly what we need to know.
When searched for siem, https://support.quest.com/change-auditor/kb?k=siem, shows a couple of tidbits:
... to write Change Auditor audited events locally to a Windows event log.
And also
Select the subsystems to include in the subscription. Click Finish. For more information please see the "Managing a Splunk integration" section of the SIEM Integration Guide.
When you put those two together, I believe Change Auditor can record events into the Windows Event Log, and from there you can either collect them into Splunk via UF or WMI, or can use Event Log Forwarding (an MS thing) to move those logs to another system, from where you can collect them via UF or WMI.
But either way, that SIEM guide should get you started!
Happy Splunking!
-Rich
