hello I was reading about how to configure sysmon to feed splunk with its logs and I reached this page, knowing that Im new to both splnk and sysmon , I tried to check the 2 links in the answer above but still its not clear to me! first link says that to get data from sysmon to splunk you need to configure a certain file (easy and sweet) however the second link says that there is an add-on to be installed at splunk, but unfortunately I didn't find this add-on. I hopefully want t complete and detailed guide of how to get data from sysmon into splunk.
... View more