SailPoint IdentityNow AuditEvent Add-on provides customers the ability to extract audit information from SailPoint's IdentityNow product. The add-on is intended to make it easier to bring IdentityNow user activity and governance events into Splunk to improve insights from security incident and event monitoring solution.
Documentation is available to SailPoint community members here: https://community.sailpoint.com/docs/DOC-11294
Along with the audit information, the SailPoint IdentityNow AuditEvent Add-on also provides a source types with in Splunk®.This source type is used to collect events from SailPoint's IdentitNow tenant(s). Users can configure this source type to collect events to Splunk® and populate a custom dashboard visualizing different types and details for these events.