The Splunk Add-on for Stream Wire Data is a companion Add-on to Splunk App for Stream and Splunk Add-on for Stream Forwarders. This add on has all the knowledge object and CIM mappings for data generated by The Splunk Add-on for Stream Forwarders (https://splunkbase.splunk.com/app/5238/).
This package contains:
Before the 7.3 release the contents of this package were shipped with the Splunk App for Stream and Splunk Add-on for Stream Forwarders. AS of 7.3 these apps have been broken into the following packages:
Splunk App for Stream (https://splunkbase.splunk.com/app/1809): Forwarder management, dashboards, calculators and admin tools
Splunk Add-on for Stream Wire Data (https://splunkbase.splunk.com/app/5234): Knowledge objects for parsing Stream data for use by users. Installed on Indexers and Search Heads.
Splunk Add-on for Stream Forwarders (https://splunkbase.splunk.com/app/5238): Network data collection tools for capturing network data, interpreting protocols, extracting custom fields and sending to Splunk. Installed on Splunk Universal or Heavy Forwarders (or wherever network data collection is required).
Please see migration steps for moving from 7.2 to 7.3 in the Stream doumentation to prepare for this migraiton:
For first time installs follow the Stream installation docs:
Updated Splunk License Agreement
Please see the release notes here -
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.