Where I can find the instructions about forwarding the Balabit SCB (5.0.0a) events to the Splunk Enterprise?

[forseec]

Where I can find the instructions about forwarding the Balabit SCB (5.0.0a) events to the Splunk Enterprise? I have installed the Balabit Privileged Account Analytics application. And now about the next steps. Thank you.

[bazsi · Accepted solution]

This app only works if you also have Balabit Privileged Account Analytics deployed as well, and is used to display its results on the Splunk interface.

With Balabit PSM (aka SCB) version 5f4, the analytics has even been integrated into the base product, making the deployment a lot easier. Let me know if you need further information.