Hi @akashbhardwaj10  Crowdstrike is having a lot to cover, Following add-on available in Splunkbase. crowdstrike.com having resources, blog covering such usecases. CrowdStrike Falcon Event Streams Technical Add-On | Splunkbase ---------------- An upvote would be appreciated if it helps! ... View more

Hi You should use "per result" Alert type. https://docs.splunk.com/Documentation/Splunk/8.2.0/Alert/AlertTriggerConditions r. Ismo ... View more

Could you be more specific, please? Do you need to configure Zscaler or Splunk (or both)? What is the problem you are having? What solutions have you tried so far? Have you checked the Zscaler apps in splunkbase? ... View more