No, unfortunately. I've changed jobs a few times and I no longer support a SCCM or Splunk environment and lost access to my test environment. I'm hoping to build my own but I haven't had the amount of free time lately to tackle that large of a project.
... View more
Thank you Asif.
I'm finishing up building a new development lab and hope to have a new version of the app with Splunk DB Connect 2 support later this month.
... View more
There are db-tails that get indexed and a few lookups. The app primarily uses the v_GS_Threats, v_StatusMessage, v_gs_installed_software_categorized, v_hs_installed_software, and v_combineddeviceresources views in the SCCM database. You can get an idea of the indexed size by reviewing these. The amount of data added per day will depend on the amount of clients and frequency of your discoveries.
... View more