I have problems with the integration of SentinelOne and Splunk Cloud. I'm using the app https://splunkbase.splunk.com/app/5433 and try 2 different SentinelOne consoles (set the URL and Token for each console). I don't know if I am missing something or what is the problem. Can some one help me to understand this integration? - Under API Configuration we have the URL usea1-***.sentinelone.net and Token (maybe the token is not the correct one? Where can I find it?) - Under Inputs set the destination index for the logs. - Under Base Configuration I can't set the index created (the same as the Inputs tab) Btw, I don't have the administration of SentinelOne console.
... View more