A custom Splunk TA that collects BigID audit logs. Supply this TA with your BigID corporate URL, service account Token Name, and the corresponding Token Authorization.
NOTE: This app was tested working in our production environment, which is connected to our network. Upon testing on a Splunk Heavy Forwarder that's not in our corporate VPN, the app fails and produces a '403' error.
Help me develop this app: https://github.com/morethanyell/bigid-splunk-ta