Splunk Cloud Platform

How to Forward Splunk Cloud Audit Data to QRadar?

manikanthkoti
Loves-to-Learn Everything

Hi Everyone,

 

Is there anyway to forward Splunk User Activity Data(audit data) to External QRadar Server.

 

We have find the below reference link but unfortunately not able to implement because we dont have enough documentation for steps

https://exchange.xforce.ibmcloud.com/hub/extension/f02b54de6c7cd4a5c66676592c36151b

 

Pleas help me for this  

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...