WeAre RSS App For Splunk provides a supported modular input that polls RSS 2.0 and ATOM feeds on a schedule, indexes only new entries (checkpoint deduplication), and lets you configure index, sourcetype, SSL verification, polling interval, and event timestamp behavior (indexing time or feed date fields). Typical uses: Monitoring vendor security bulletins, tracking regulatory or industry news, and ingesting syndicated operational content for dashboards, correlation searches, and alerting.