Installing EDR Agents to Splunk Components

Splunk Enterprise

Hello Everyone,

We are deploying EDR agents to all servers in our environment but I wonder if EDR agent creates any issue on Splunk components like Indexer,SH or Heavy forwarders.

Has anyone install edr agent into the Splunk components which runs on centos 7 and have any problem?

Kind Regards

Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...