Yes, you can — as long as the IM platform provides access to logs or message data. For instance, with on-prem or self-hosted solutions like MirrorFly’s Enterprise Instant Messaging Software , you can retain all chat logs within your infrastructure and forward them to Splunk through APIs or syslog. That setup makes it easier to perform forensic analysis or compliance audits compared to hosted services where data access is limited. ... View more