I would recommend downloading a program similar to 7zip which will let you extract the files from the SPL file on Windows. ... View more

You should be able to untar the SPL file by doing something similar to: tar xvf duo_splunkapp_1.1.1.spl ... View more

Hey there whorobin, The Duo Splunk Connector was built for Splunk Enterprise and works best there but I just tested that you should be able to manually add the Duo Splunk Connector to Splunk Light. You won't be able to take advantage of any of the prebuilt dashboards since we use a macro instead of an index in our searching but but you will get the Duo Data input and will be able to pull in Duo logs. To do that: You can download the SPL file from the Duo Docs. You can then untar the file and copy the "duo_splunkapp" folder into your Splunk "apps" directory. Restart Splunk Go to Data Inputs -> Duo Data Input From there you can follow the directions in the docs to get the connector setup. ... View more

Hey rajshahcme, The app has been updated on Splunkbase to v1.1 with macro support. The macro can be found in the defaults/macros.conf file or can be changed through the web interface. ... View more

This is Jamie from Duo here. Feel free to send over any suggestions like mmodestino_splunk mentioned. An example of what you're looking for would definitely help speed up any changes you'd like to see. ... View more