The ExtraHop Add-On and App for Splunk should work in Splunk 7.3. If you're not seeing data after creating the data inputs, check out $SPLUNK_HOME/var/log/splunk/ta_extrahop_addon_extrahop.log on the system where the Add-On is installed. The log file should show any errors and provide clues as to what's going on. You can also open a case with ExtraHop Support, at support@extrahop.com, so they can help gather troubleshooting data.
The current version of the Add-On (1.2.2) may not work with Splunk 8.0, due to Splunk's Python 3 migration, but we're working on an update that will support Python 3 and Splunk 8.0+.
... View more