Featured: Enterprise Security
Conducting an insider threat workshop in your organization
The self-guided workshop is focused on developing recommended insider threat use cases in Splunk Enterprise Security and how to enhance these use cases with risk-based alerting. The key objective is to help you detect, mitigate, and emulate insider actions on IT systems and stop them.
Featured: Data
Selecting the best method for Google data ingestion
As a cloud service provider, Google offers variety of utilities and services. Typically, organizations want to analyze logs, metrics, traces, or a combination of those items from these services. This article explains different ways to collect this data using Splunk software.
Featured: Splunk Platform
Bypassing a database for faster processing
Many admins have their Splunk environment configured in a way that requires a lengthy, multistep process to get time series data into a relational database, and then available for search and reporting. This brief article offers a simplified method.
Accelerate your industry with ready-to-deploy Solution Accelerators from Splunk. Tailored for sectors like manufacturing and finance,
our analytics-driven solutions help you monitor, optimize, and secure operations for faster, smarter decision-making.
Resources for Splunk Program Managers
The Splunk Success Framework
Accelerate and increase the value you derive from your data with Splunk software using the Splunk Success Framework (SSF), a flexible collection of best practices for setting up Splunk Enterprise or Splunk Cloud Platform as a program.
Data Ingestion and Application
Data Descriptors
Bring data to every question, decision, and action across your organization with comprehensive guidance for getting data in and applying data to your key use cases.
Get the latest
New Articles
- Platform
- Turn data into doing to unlock innovation, enhance security and drive resilience.
- Security
- Protect your business and modernize your security operations with a best-in-class data platform.
- Observability
- Solve problems in seconds with the only full-stack, analytics-powered, and OpenTelemetry-native observability solution.
- Splunk Success Framework
- The Splunk Success Framework (SSF) is a flexible collection of best practices for setting up your Splunk software implementation as a program.
- Data Descriptors
- The data sources in use at your organization can all be linked to common use cases. Get recommendations from Splunk experts and then start getting answers from your data.
- Antivirus and antimalware data
- Application data
- Application server data
- Authentication data
- Backup data
- Vendor-specific data
- Endpoint detection and response (EDR) data
- Intrusion detection and prevention data (IDS and IPS)
- Load balancer data
- Email data
- Network communication data
- Patch management data
- Physical security data
- Web proxy data
- Change events data
- Configuration management data
- IP address assignment data
- Vulnerability detection data
- Web server data
- DNS data
- Linux and Unix
- Okta
- SAP
- Zscaler
- Zoom
- Zeek
- Websense
- VMware
- CrowdStrike
- Carbon Black
- Kubernetes
- Check Point
- Fortinet
- Salesforce
- Symantec
- Palo Alto Networks
- Trend Micro
- Tenable
- GitHub
- Atlassian
- AppDynamics
- Dell
- Syslog
- Apache
- Amazon
- Cisco
- Microsoft
- JupiterOne
- GitLab
- Mac OS
- Docker
- Firewall data
- MOVEit
- Skyhigh Security
- CyberArk
- OpenAI
- Adobe
- NETSCOUT
- Nagios