Splunk Enterprise

Splunk Crowdstrike Logs Ingestion

sahiltcs
Path Finder
Hello Team,
 
We have installed Crowd strike Add on 1.0.7 and ingested the logs via API in Splunk, Challenge we are facing every week logs are stop reporting to Splunk and manually we need to refresh the connection from Splunk, Can you please help why this issue is happened.
 
Is there any bug in Add on or do we need to set the limit in Crowdstrike add on to refresh the connection?
 
Thanks,
Sahil  
Labels (1)
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...