Splunk Enterprise Security

Splunk Enterprise Security: Is there a developer version?

rohansecadvbot
Explorer

Hi
I am trying to create add-ons for splunk enterprise security. is there a developer version of the app , with sample data, that i can install on my local splunk enterprise (like the cloud sandbox trial thats offered). I have a splunk dev license.

Thanks

0 Karma
1 Solution

LukeMurphey
Champion

ES includes data samples that can be used to populate the indexes accordingly. To use them, just install the Eventgen app along with ES. Eventgen will automatically begin making events.

Thus, all you need to do is:

  1. Request a Developer copy from http://dev.splunk.com/view/enterprise-security/SP-CAAAFA6
  2. Use Eventgen app to populate the indexes

There are tons of resources that can be helpful for writing apps so make sure to ask questions here if you run into trouble.

View solution in original post

LukeMurphey
Champion

ES includes data samples that can be used to populate the indexes accordingly. To use them, just install the Eventgen app along with ES. Eventgen will automatically begin making events.

Thus, all you need to do is:

  1. Request a Developer copy from http://dev.splunk.com/view/enterprise-security/SP-CAAAFA6
  2. Use Eventgen app to populate the indexes

There are tons of resources that can be helpful for writing apps so make sure to ask questions here if you run into trouble.

rpille_splunk
Splunk Employee
Splunk Employee

See http://dev.splunk.com/view/enterprise-security/SP-CAAAFA6. There's a contact email there that you can use to request a dev copy.

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...