# Create Input

# Create Account

  1. From Splunk Web, navigate to this app (CrowdStrike Falcon Identity Protection).
  2. Click the "Configuration" tab and then click "Add."
  3. Provide a unique name (no spaces) and the API Credentials.
  4. (optional) Configure proxy.

# Create Input

  1. On the "Inputs" tab click "Create New Input."

  2. Provide a unique name (no spaces).

  3. Enter a time interval in seconds or a valid cron schedule.

  4. Select the index, Cloud Environment, and the Account that was just set up.