Hello, Can someone confirm if this is official app by microsoft or a third party created app? I want to integrate azure waf logs into my splunk indexer.   Thanks and Regards, satyam ... View more

Hello Team,   Can someone provide me steps to integrate AWS guardduty logs using Splunk Add-on for AWS. Please do provide me documentation if any. ... View more

Hello All, We have a server on which indexer and search head deployed. furthermore we are getting logs from UF and HF's. due to some requirement we might require some downtime for the server on which Indexer and search head has been deployed. Will there be any log loss due to this server downtime? If yes how long logs will be lost there? If UF cache logs locally then for how log UF cache the logs, if there any dependency on cache memory available on UF server?   ... View more

Hello All, We have log flow from fortigate to splunk as follows: Fortigate Analyzer> Syslog server with UF>Deployment server> SearchHead /Indexer. Kindly suggest how can i get logs using fortinet add on over indexer? will i have to install fortinet add on app over syslog server UF as well? and what data source need to be selected over indexer. ... View more