Support for Splunk Enterprise Security and provided add-ons

Splunk Enterprise Security is a premium app that supports additional add-ons to make it easier for you to add data to your Splunk deployment. Support for Splunk Enterprise Security is different from the support for the add-ons that help you get data in.

  • The add-ons that include "SA-" or "DA-" in the name make up the Splunk Enterprise Security framework. These add-ons are supported in accordance with the Purchased Software with Active Support Subscription section of the Splunk Software Support Policy. See Splunk Software Support Policy.
  • The rest of the add-ons include "TA-" in the name and are technology-specific and provide the CIM-compliant knowledge necessary to incorporate that source data into Enterprise Security. These add-ons are available for your convenience and are supported differently than the add-ons that make up the Splunk Enterprise Security framework. See the Splunk Extensions section of the Splunk Software Support Policy. See Splunk Software Support Policy.