Skip to main content
CrowdStrike Falcon Event Streams Technical Add-On app icon

CrowdStrike Falcon Event Streams Technical Add-On

This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform.Built by Ramani Nikitha Janapareddy
splunk product badge
Default Version 2.0.6

December 1, 2020

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 9.2, 9.1, 9.0

CIM Version: 4.x

Rating
0
(0)

Log in to rate this app

Support
Not Supported

This technical add-on enables customers to create a persistent connect to CrowdStrike's Event Streams API so that the available detection, event, incident and audit data can be continually streamed to their Splunk environment. This connection enables organizations to combine the power of the Splunk platform with the visibility and rich event data of the CrowdStrike platform. This add-on also is used to support the CrowdStrike Falcon App (https://splunkbase.splunk.com/app/5094/).