Splunk Archives - Page 2 of 9 - Discovered Intelligence

Enhancing Security Operations: The Unified Integration of Splunk ES and SOAR

September 30, 2024/in Big Data, Education, Solutions, Splunk/by Heejoon Byun

Integrating Splunk Enterprise Security (ES) with Splunk Security Orchestration, Automation and Response (SOAR) can significantly enhance your organization’s security operations. By automating alert handling and response processes, this integration streamlines security incident management and enables faster, more effective threat mitigation. Splunk SOAR empowers security teams to automate actions based on Splunk ES detections using assigned playbooks, enabling seamless incident resolution.

Upgrader App for Splunk: Effortlessly Upgrade Your Splunk Instance

September 23, 2024/in Apps, Big Data, Splunk/by Goutham Vinaya Babu

Upgrading on-premise Linux Splunk Enterprise instances has historically been a complex and challenging task, but the new Upgrader App for Splunk (UA4S) app is designed to change that. In this review, we’ll take a closer look at how this app simplifies the upgrade process and makes this task accessible for anyone, even those without extensive technical expertise.

Asset Investigations with Splunk Asset and Risk Intelligence

September 16, 2024/in Asset and Risk Intelligence, Security, Solutions, Splunk/by Discovered Intelligence

Splunk Asset and Risk Intelligence (ARI) enables your team to quickly perform complete and thorough asset investigations. An interactive and holistic approach provides security teams with much needed context about assets, including asset health, network activity and associations.

Setting Up a Splunk Testing Environment Using Terraform & GCP

September 9, 2024/in Big Data, Education, Solutions, Splunk/by Darren Fuller

Overview

Have you ever wished you had a fresh ephemeral Splunk instance that you could quickly spin up, run some tests and then kill it, with maximum speed and minimum cloud costs?

Enter Hashi Terraform to the rescue. The industry-leading infrastructure-as-code tool makes the standup, setup and teardown of cloud compute nodes simple, speedy and repeatable so that an environment can be built, a complete set of tests can be run, results received and the test nodes destroyed in minutes rather than hours.

In this whitepaper, I show how I set up my computer and built the Search Head and Deployment server, as well as how I set up the many Splunk Universal Forwarders to satisfy the test plan.

Download Whitepaper

Get access to this exciting whitepaper now, by completing the form below.

Looking to expedite your success with Terraform? Click here for more information about our Terraform Professional Service offerings, including:

Terraform Implementation
Infrastructure Migration using Terraform
Implementing Zero Trust Architectures
Terraform Operational Assessment

Asset Discovery with Splunk Asset and Risk Intelligence

August 11, 2024/in Asset and Risk Intelligence, Security, Solutions, Splunk/by Discovered Intelligence

Splunk Asset and Risk Intelligence (ARI) continuously discovers all assets on the network using a unique approach that creates a single source of truth from multiple sources of record, resulting in comprehensive and accurate asset visibility and reporting.

Introducing Splunk Asset and Risk Intelligence

August 9, 2024/in Asset and Risk Intelligence, Security, Solutions, Splunk/by Discovered Intelligence

What is Splunk Asset and Risk Intelligence?

Splunk Asset and Risk Intelligence (ARI) is a powerful, premium application from Splunk which delivers proactive risk mitigation through continuous asset discovery and compliance monitoring.

Splunk Asset and Risk Intelligence – a CAASM Solution for Splunk

July 2, 2024/in Big Data, Data Integration, Security, Solutions, Splunk/by Discovered Intelligence

Image credit: https://www.splunk.com/en_us/products/asset-and-risk-intelligence.html

At the recent Splunk .Conf in Las Vegas a couple of weeks ago, we were able to get a detailed demo of Splunk’s new and exciting Splunk Asset and Risk Intelligence (Splunk ARI) security solution. What a great solution and one that is much needed within their security solution portfolio. Splunk ARI falls into a category of products known as CAASM – Cyber Asset Attack Surface Management. In this post, we dive a little deeper into what CAASM is, why it is critical tool for your organization and how Splunk ARI can help.

4 Enhancements to Elevate Your Splunk Platform

June 28, 2024/in Big Data, Education, Solutions, Splunk/by Carlos Moreno Buitrago

Still winding down from the incredible experience at .conf24, where we delved into the latest market trends, we’ve uncovered several fascinating enhancements for the Splunk platform. These improvements not only elevate the performance and efficiency of Splunk but also offer exciting features that will be available in future releases. Join us as we explore four powerful upgrades that can be used in your Splunk environment.

Learning Splunk with the new ‘Getting Started with Splunk’ Video Series

June 11, 2024/in Big Data, Education, Solutions, Splunk/by Discovered Intelligence

Looking to enhance your understanding of Splunk in a fun and concise way?

Help Getting Started with Splunk

June 1, 2024/in Education, Splunk/by paul

Splunk is a great data intelligence platform when used effectively. With a full understanding of Splunk’s functionality and capabilities, it should totally consume you with it’s awesomeness and you will find yourself preaching its benefits to your entire company! Our customers are always asking for recommendations on how to better grasp the fundamentals of the platform and the following article should provide this guidance. Read more

Overview

Download Whitepaper

What is Splunk Asset and Risk Intelligence?

From Our Blog