CrowdStrike Falcon Data Replicator (FDR): SQS Add-on for Splunk

This guide covers the deployment, configuration and usage of the CrowdStrike Falcon Data Replicator: SQS Technical Add-on (TA) for Splunk.

The CrowdStrike Falcon Data Replicator Technical Add-on for Splunk allows CrowdStrike customers to retrieve FDR data from the CrowdStrike hosted S3 buckets via the CrowdStrike provide SQS Queue.

TECHNICAL CENTER

  • OS icon
  • deployment icon
  • installation icon

For technical information on installation, policy configuration and more, please visit the CrowdStrike Tech Center.

Visit the Tech Center