We are installing the Saviynt TA to our client's Splunk Cloud instance. The Splunk admin team wanted to check if the inputs can be disabled within the default inputs.conf. The reason for this is if it were to be installed with those inputs enabled, it could disrupt the input on the heavy forwarder.
Solved! Go to Solution.
I appreciate you reaching out to the Saviynt forums.
Refer to the following documentation link for a detailed explanation of the integration between Saviynt and Splunk
The steps defined in Splunk addon (Savint TA) document is applicable to onprem Splunk Enterprise implementation. This addon was developed by the Saviynt community and was verified by Saviynt, however this addon is not a product out of the box offering - you can review the supported version and other details at the start of the splunk integration guide https://docs.saviyntcloud.com/bundle/Splunk-Guide/page/Content/About-this-Guide.htm.