The documentation for Splunk Enterprise Security versions 8.0 and higher have been rearchitected from previous versions, causing some links to have redirect errors. For documentation on version 8.0, see Splunk Enterprise Security documentation homepage.
This documentation does not apply to the most recent version of Splunk® Enterprise Security.
For documentation on the most recent version, go to the latest release.
Support for Splunk Enterprise Security and provided add-ons
Splunk Enterprise Security is a premium app that supports additional add-ons to make it easier for you to add data to your Splunk deployment. Support for Splunk Enterprise Security is different from the support for the add-ons that help you get data in.
- The add-ons that include "SA-" or "DA-" in the name make up the Splunk Enterprise Security framework. These add-ons are supported in accordance with the Purchased Software with Active Support Subscription section of the Splunk Software Support Policy. See Splunk Software Support Policy.
- The rest of the add-ons include "TA-" in the name and are technology-specific and provide the CIM-compliant knowledge necessary to incorporate that source data into Enterprise Security. These add-ons are available for your convenience and are supported differently than the add-ons that make up the Splunk Enterprise Security framework. See the Splunk Extensions section of the Splunk Software Support Policy. See Splunk Software Support Policy.
Last modified on 22 November, 2021
| How to find answers and get help with Splunk Enterprise Security | Credits |
This documentation applies to the following versions of Splunk® Enterprise Security: 6.2.0, 6.4.0, 6.4.1, 6.5.0 Cloud only, 6.5.1 Cloud only, 6.6.0, 6.6.2
Download manual
Feedback submitted, thanks!