Splunk Cloud Platform

How to Forward Splunk Cloud Audit Data to QRadar?

manikanthkoti
Loves-to-Learn Everything

Hi Everyone,

 

Is there anyway to forward Splunk User Activity Data(audit data) to External QRadar Server.

 

We have find the below reference link but unfortunately not able to implement because we dont have enough documentation for steps

https://exchange.xforce.ibmcloud.com/hub/extension/f02b54de6c7cd4a5c66676592c36151b

 

Pleas help me for this  

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...