CrowdStrike Devices Data

CrowdStrike Falcon Devices Technical Add-On is required to collect information about the assets from CrowdStrike.

Splunkbase Download:

Installation and Configuration Guide:

Note: Use index=crowdstrike for data collection or update the macro definition for cs_crowdstrike_devices (Settings > Configuration).

Estimated Data Size

CrowdStrike Falcon Devices Technical Add-On does not consume a ton of license usage since it only collects the assets information, but ultimately it depends on the number of assets that are present in your environment.

Copyright © 2023 CrossRealms International.