The TA does work behind the scenes to make sure that the event data is parsed correctly and ready for the App dashboards. So you certainly need both. Unfortunately, our Splunk App guide has not been updated with the latest manual which addresses both the TA and the App. We are working to update the guide ASAP. Meanwhile, feel free to send us an e-mail to splunkapp@varonis.com and we will send you the updated document.
~ Ofer,
... View more