CrowdStrike Falcon Splunk App User and Configuration Guide

This document outlines the deployment and configuration of the CrowdStrike App available for Splunk Enterprise and Splunk Cloud. This app is designed to work with the data that’s collected by the officially supported CrowdStrike Technical Add-Ons: CrowdStrike Event Streams Technical Add-On and CrowdStrike Intel Indicators Technical Add-On.


  • OS icon
  • deployment icon
  • installation icon

For technical information on installation, policy configuration and more, please visit the CrowdStrike Tech Center.

Visit the Tech Center