Getting Data In

How can i integrate Workspace one logs into Splunk?

Abhirup89
Explorer

Can someone guide me on ingestion of Workspace one logs into splunk

Tags (1)
0 Karma
1 Solution

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

View solution in original post

iamarkaprabha
Contributor

Hi ,

Yes , Usually Workspace one hosted in VM Ware. They generated syslogs , you can use syslog forwarder at workspace side and forward those logs into splunk HF then index it using TA.

gregz00
Observer

Splunk HFW seems the best way to get this done.

But, has anyone figured out a way to use HEC Endpoint?

0 Karma

sheamus69
Communicator

What specific TA are you referring to?

0 Karma

rnishimoto
New Member

@sheamus69 I am also trying to ingest WorkspaceOne logs into Splunk. Were you able to find a specific TA that worked for this purpose?

0 Karma

rajashaey
Engager

Hi,

Anyone figured out the way to integrate please? 

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...