This guide covers the deployment, configuration and usage of the CrowdStrike Unified Alerts Technical Add-on (TA) for Splunk v2.3.0 and above. The CrowdStrike Unified Alerts Technical Add-on for Splunk allows CrowdStrike customers to retrieve Alert event data from multiple CrowdStrike produces via API and index it into Splunk.
