Featured: Splunk Platform
Optimizing Splunk knowledge bundles
The knowledge bundle is a collection of configurations and knowledge objects that is replicated across search heads and peers to ensure consistency. This article provides guidelines to help you optimize your knowledge bundle size to achieve the right balance between functionality and performance.
Featured: Cloud Platform
Getting Kubernetes log data into Splunk Cloud Platform with OpenTelemetry
Splunk Cloud Platform offers many ways to get logs into the platform. For applications running in Kubernetes, we recommend using native OpenTelemetry logging capabilities, which are included as part of the Splunk Distribution of the OpenTelemetry Collector. Learn more in this article.
Featured: Enterprise Security
Using the Splunk Enterprise Security assets and identities framework
You have decided to switch to Splunk Enterprise Security so that you can take advantage of the capabilities of the Assets and Identities Manager. It will help your analysts and incident responders get the information they need to work more effectively. You want to learn best practices for using this system.
Resources for Splunk Program Managers
The Splunk Success Framework
Accelerate and increase the value you derive from your data with Splunk software using the Splunk Success Framework (SSF), a flexible collection of best practices for setting up Splunk Enterprise or Splunk Cloud Platform as a program.
Data Ingestion and Application
Data Descriptors
Bring data to every question, decision, and action across your organization with comprehensive guidance for getting data in and applying data to your key use cases.
Get the latest
New Articles
- Platform
- Turn data into doing to unlock innovation, enhance security and drive resilience.
- Security
- Protect your business and modernize your security operations with a best-in-class data platform.
- Observability
- Solve problems in seconds with the only full-stack, analytics-powered, and OpenTelemetry-native observability solution.
- Splunk Success Framework
- The Splunk Success Framework (SSF) is a flexible collection of best practices for setting up your Splunk software implementation as a program.
- Data Descriptors
- The data sources in use at your organization can all be linked to common use cases. Get recommendations from Splunk experts and then start getting answers from your data.
- Malware data
- Application data
- Application server data
- Authentication data
- Backup data
- Vendor-specific data
- Endpoint detection and response (EDR) data
- Intrusion detection data
- Load balancer data
- Email data
- Network communication data
- Patch management data
- Physical security data
- Web proxy data
- Change data
- Configuration management data
- IP address assignment data
- Vulnerability detection data
- Web server data
- Network resolution data
- Linux and Unix
- Okta
- SAP
- Zscaler
- Zoom
- Zeek
- Websense
- VMware
- CrowdStrike
- Carbon Black
- Kubernetes
- Check Point
- Fortinet
- Salesforce
- Symantec
- Palo Alto Networks
- Trend Micro
- Tenable
- GitHub
- Atlassian
- AppDynamics
- Dell
- Syslog
- Apache
- Amazon
- Cisco
- Microsoft
- GitLab
- Mac OS
- Docker
- Network firewall data
- Skyhigh Security
- OpenAI
- Adobe
- NETSCOUT
- Nagios
- Tanium
- Gigamon
- Fabrix.ai
- Financial data
- Medical device data
- Mobile device data
- User activity log data
- Network sessions data
- Electronic data interchange data
- Operational technology data
- IoT and industrial IoT data
- Network switch data
- Network router data
- Supplier and procurement data
- Network traffic data
- Web application firewall data
- Call detail record data
- Physical card reader data
- Content delivery network data
- Video conferencing and communication data
- Inventory data
- Storage data
- Database data
- Customer relationship management data
- Certificates data
- OpenTelemetry data
- Cloud services data
- Performance data
- Update data
- Personally identifiable information
- SNMP data
- Event signatures data
- Cloud productivity suite data
- Compliance and governance data
- Alerts data
- Binary repositories data
- Virtualization data
- Printer data
- Real user monitoring data
- Data access data
- Network access control data
- Data loss prevention data
- Insider threat data
- Threat intelligence data
- Synthetic monitoring data
- OpenLLMetry data
- Security orchestration, automation, and response data
- Network VPN data
- Law enforcement data
- Deep packet inspection data