Crowdstrike to Splunk on-prem
Hello colleagues, for a customer I needed to build a method to export telemetry data from Cloud to Splunk on premises. The use case here is to use 30 days retention on CS and perform long term retention on already purchased on premises Splunk. I know that we can use Falcon Data Replicator but customer does not want to use Amazon S3 or any intermediately 3rd party for storing this data. We directly want to ingest telemetry from cloud to on-prem Splunk. I see that we have Event Streams API and a...
