two DUO consoles uploading to splunkcloud

[soh_tax_rna]

Is it possible to attach two DUO consoles to the splunk API - we have a standard console and are soft migrating to DUO Federal, and would like visibility/ ingestion for both in Splunk:  We see the option to edit the DUO Splunk connector, not add a second one.  Thank you! 

[richgalloway · Accepted solution]

Consider installing a second copy of the connector.  You will need to put it in a different directory and will have to edit app.conf, but it should allow for a second connection to DUO.  Installing a second copy of an app should be done from the CLI.

[soh_tax_rna]

thank you - this would work as well:  we are now  going the old data fall out of dashboard and be updated with data from the new DUO site.  You can have data ingested from multiple DUO APIs in the dashboard concurrently, so we have visibility from both sites on the same dashboard, but consolidated.  Appreciated!