About sfraine

sfraine

Thanks for your reply. Yeah ... I think I'll go down the Crowdstrike support route as suggested.

sfraine

Thanks for getting back to me on this. Unfortunately the BehavioralRuleDetectionSummaryEvent data doesn't appear when I use 'all'. I'll probably end up opening a Crowdstrike support case.

sfraine

Hi, we're hoping to onboard to Splunk these 2 event types from Crowdstrike: CorrelationRuleDetectionSummaryEvent BehavioralRuleDetectionSummaryEvent In our Splunk Dev environment we have upgraded the CrowdStrike Falcon Event Streams Add-On: Inputs app up to 3.7.2. When we launch the app, and go to 'Create New Input' and search for them under 'Event Types', CorrelationRuleDetectionSummaryEvent is present there, but BehavioralRuleDetectionSummaryEvent is not, so cannot be onboarded. Who can we go to for help to get this included? Thanks!

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎07-13-2026

Online Status	Offline
Date Last Visited	Tuesday

CrowdStrike Falcon Event Streams Add-On: Inputs ap...

Re: CrowdStrike Falcon Event Streams Add-On: Input...

Re: CrowdStrike Falcon Event Streams Add-On: Input...

CrowdStrike Falcon Event Streams Add-On: Inputs ap...

Join the Conversation

CrowdStrike Falcon Event Streams Add-On: Inputs ap...

Re: CrowdStrike Falcon Event Streams Add-On: Input...

Re: CrowdStrike Falcon Event Streams Add-On: Input...

CrowdStrike Falcon Event Streams Add-On: Inputs ap...