Support for Splunk Enterprise Security and provided add-ons
Splunk Enterprise Security is a premium app that supports additional add-ons to make it easier for you to add data to your Splunk deployment. Support for Splunk Enterprise Security is different from the support for the add-ons that help you get data in.
- The add-ons that include "SA-" or "DA-" in the name make up the Splunk Enterprise Security framework. These add-ons are supported in accordance with the Purchased Software with Active Support Subscription section of the Splunk Software Support Policy. See Splunk Software Support Policy.
- The rest of the add-ons include "TA-" in the name and are technology-specific and provide the CIM-compliant knowledge necessary to incorporate that source data into Enterprise Security. These add-ons are available for your convenience and are supported differently than the add-ons that make up the Splunk Enterprise Security framework. See the Splunk Extensions section of the Splunk Software Support Policy. See Splunk Software Support Policy.
How to find answers and get help with Splunk Enterprise Security
This documentation applies to the following versions of Splunk® Enterprise Security: 7.0.1, 7.0.2, 7.1.0, 7.1.1
Feedback submitted, thanks!