Hey there whorobin,
The Duo Splunk Connector was built for Splunk Enterprise and works best there but I just tested that you should be able to manually add the Duo Splunk Connector to Splunk Light. You won't be able to take advantage of any of the prebuilt dashboards since we use a macro instead of an index in our searching but but you will get the Duo Data input and will be able to pull in Duo logs.
To do that:
You can download the SPL file from the Duo Docs.
You can then untar the file and copy the "duo_splunkapp" folder into your Splunk "apps" directory.
Restart Splunk
Go to Data Inputs -> Duo Data Input
From there you can follow the directions in the docs to get the connector setup.
... View more