Splunk Forwarder and Splunk Add-on

[NirajSaraf]

As per Splunk Integration guide its mentioned that Splunk add-on is needed to collect data from EIC and to feed the data to the Splunk application. We also found some links on Splunk forwarder. 

Is Splunk forwarder also required along with Splunk add-on for Splunk integration with Saviynt?

[Manikanta_S]

Hello @NirajSaraf ,

We don't support splunk forwarder any more. We have a Splunk plugin that pulls in the data from Saviynt via APIs

Please refer to the below documents for splunk / SIEM Integration : 
https://saviynt.freshdesk.com/support/solutions/articles/43000666823-splunk-integration-guide

https://saviynt.freshdesk.com/a/solutions/articles/43000532293