Hi Gentlemen, I'm working for an API security company, we provide vulnerability detection and real-time detection and prevention. We are now working on integrating our platform with Splunk and some question popped-up as part of the process: To which version and products of Splunk we should make the integration? is it a generic integration to all of them and we only need to switch platform, or it's different for each one?  How should we send the data to Splunk? we thought about syslog, is there any other recommended way? What kind of data is most recommended that we send for Splunk?  Can we create rules and actions through the integration with Splunk? (e.g WAF rule) What is the best practice to make the integration and test it? should we raise a Splunk environment, if so which one and those Splunk have any support for this processes? Additionally I would like to understand whether we need to send data differently if the type of data is different, for example, let's assume I'm sending both vulnerabilities and anomalies, should I send both of them to the same place? or there is different location for each one of them.   Thanks in advance, Jonathan. ... View more