Featured: Edge Processor
Following best practices for using SPL2 templates
SPL2 templates streamline data management by optimizing formatting, removing whitespace, and excluding certain fields that might not be useful. This article provides guidelines to help you use these templates securely.
Featured: Infrastructure Monitoring
Monitoring Amazon Elastic Kubernetes Services with Splunk Observability Cloud
With Splunk Observability Cloud, you can collect and store Amazon CloudWatch metrics data. If pieces of your applications and infrastructure live outside of AWS, you can view that data alongside your AWS data for a complete observability picture.
Featured: Enterprise Security
Conducting a SIEM use case development workshop
This guidance is designed to help you conduct an effective use case development workshop. The resulting roadmap will include required data sources and alignment with investigative techniques and response plans for the assets or entities you want to protect.
Accelerate your industry with ready-to-deploy Solution Accelerators from Splunk. Tailored for sectors like manufacturing and finance,
our analytics-driven solutions help you monitor, optimize, and secure operations for faster, smarter decision-making.
Resources for Splunk Program Managers
The Splunk Success Framework
Accelerate and increase the value you derive from your data with Splunk software using the Splunk Success Framework (SSF), a flexible collection of best practices for setting up Splunk Enterprise or Splunk Cloud Platform as a program.
Data Ingestion and Application
Data Descriptors
Bring data to every question, decision, and action across your organization with comprehensive guidance for getting data in and applying data to your key use cases.
Get the latest
New Articles
- Platform
- Turn data into doing to unlock innovation, enhance security and drive resilience.
- Security
- Protect your business and modernize your security operations with a best-in-class data platform.
- Observability
- Solve problems in seconds with the only full-stack, analytics-powered, and OpenTelemetry-native observability solution.
- Splunk Success Framework
- The Splunk Success Framework (SSF) is a flexible collection of best practices for setting up your Splunk software implementation as a program.
- Data Descriptors
- The data sources in use at your organization can all be linked to common use cases. Get recommendations from Splunk experts and then start getting answers from your data.
- Antivirus and antimalware data
- Application data
- Application server data
- Authentication data
- Backup data
- Vendor-specific data
- Endpoint detection and response (EDR) data
- Intrusion detection and prevention data (IDS and IPS)
- Load balancer data
- Email data
- Network communication data
- Patch management data
- Physical security data
- Web proxy data
- Change events data
- Configuration management data
- IP address assignment data
- Vulnerability detection data
- Web server data
- DNS data
- Linux and Unix
- Okta
- SAP
- Zscaler
- Zoom
- Zeek
- Websense
- VMware
- CrowdStrike
- Carbon Black
- Kubernetes
- Check Point
- Fortinet
- Salesforce
- Symantec
- Palo Alto Networks
- Trend Micro
- Tenable
- GitHub
- Atlassian
- AppDynamics
- Dell
- Syslog
- Apache
- Amazon
- Cisco
- Microsoft
- JupiterOne
- GitLab
- Mac OS
- Docker
- Firewall data
- MOVEit
- Skyhigh Security
- CyberArk
- OpenAI
- Adobe
- NETSCOUT
- Nagios
- Tanium
- Gigamon