This guide covers the deployment, configuration and usage of the CrowdStrike Unified Alerts Technical Add-on (TA) for Splunk v2.3.0 and above. The CrowdStrike Unified Alerts Technical Add-on for Splunk allows CrowdStrike customers to retrieve Alert event data from multiple CrowdStrike produces via API and index it into Splunk.

For deploying and configuring the CrowdStrike Unified Alerts Splunk Technical Add-On located on Splunkbase.