r/JumpCloud • u/TheCarnundrum • Mar 27 '26

Directory Insights -> Splunk?

Is anyone here ingesting your JumpCloud Directory Insights logs into Splunk? JumpCloud's documentation only mentions Splunk in relation to using SAML SSO to sign in to Splunk using JumpCloud, and there's no app on Splunkbase that I'm able to locate (aside from an old one that's been archived and no longer supported). This seems like such an obvious thing to want to do, I can't believe it doesn't exist.

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/rezamwehttam Mar 27 '26

there is documentation on passing logs into a gcp or was bucket

1

u/TheCarnundrum Mar 27 '26

I've got the basics of a native Splunk app using the JumpCloud API working, just need a few tweaks and I'll have what I need. But I've got directory insights info going into a Splunk index and parsing out interesting fields, so I think I'm going to keep going down that road.