Splunk Archives

Splunk for Security Data Models Acceleration - Episode 2

Splunk for Security: Normalisation – CIM Data Models Acceleration – Episode 2

Video Splunk for Security: Normalisation – CIM Data Models Acceleration Episode 2 Series Overview Video Summary In the second episode of our series on the Common Information Model (CIM), we explore how to maximise the benefits of CIM by effectively normalising data. The CIM itself is essentially a comprehensive collection of data models that Splunk […]

Splunk for Security: Normalisation – CIM Data Models Acceleration – Episode 2 Read More »

Splunk for Security Stream Windows DNS Setup - Episode 7

Splunk for Security: Expansion – Window DNS Monitoring

By Toby Brick

Video Splunk for Security: Expansion – Windows DNS Monitoring Episode 4 Series Overview Video Summary In the final video of the Splunk for Security: Expansion series, the focus is on setting up Windows DNS monitoring using Splunk Stream. The process begins with navigating to the Splunk Stream app, selecting “Configuration,” and then adding a new

Splunk for Security: Expansion – Window DNS Monitoring Read More »

Splunk for Security Data Flow Capabilities - Episode 6

Splunk for Security: Expansion – Data-Flow Capabilities

By Toby Brick

Video Splunk for Security: Expansion – Data-Flow Capabilities Episode 3 Series Overview Video Summary In this third installment of the Splunk for Security: Expansion series, the focus shifts to exploring the capabilities of the Splunk Stream app through its dashboards. The video begins by reviewing the data ingested into Splunk, which is now available for

Splunk for Security: Expansion – Data-Flow Capabilities Read More »

Splunk for Security Stream Data-Flows - Episode 5

Splunk for Security: Expansion – Stream Data-Flows – Episode 2

By Toby Brick

Video Splunk for Security: Expansion – Stream Data-Flows Episode 2 Series Overview Video Summary In this instalment of the Splunk for Security Expansion series, we delve into the data flow processes within Splunk Stream. The flow mirrors conventional data handling tools: data is captured by forwarders, which are often installed on HEC servers, and then

Splunk for Security: Expansion – Stream Data-Flows – Episode 2 Read More »

Splunk for Security Architecting Streaming - Episode 4

Splunk for Security: Expansion – Architecting Splunk Streams – Ep 1

By Toby Brick

Video Splunk for Security: Expansion – Architecting Splunk Streams Episode 1 Series Overview Video Summary In this first episode of the Splunk for Security: Expansion series, we explore the architecture and deployment of the Splunk Stream app. Splunk Stream provides real-time visibility into application and infrastructure performance by passively collecting data from the network, without

Splunk for Security: Expansion – Architecting Splunk Streams – Ep 1 Read More »

Splunk for Security What is the Common Information Model (CIM) - Episode 3

Splunk for Security: Normalisation – Understanding CIM

By Toby Brick

Video Splunk for Security: Normalisation – Understanding CIM Episode 3 Series Overview Video Summary In the third episode of our series on the Common Information Model (CIM), we explore how to maximise the benefits of CIM by effectively normalising data. The CIM itself is essentially a comprehensive collection of data models that Splunk continuously updates

Splunk for Security: Normalisation – Understanding CIM Read More »

Splunk for Security CIM Data Models 101 - Episode 1

Splunk for Security: Normalisation – CIM Data Models 101

By Toby Brick

Video Splunk for Security: Normalisation – CIM Data Models 101 Episode 1 Series Overview Video Summary This video is the first in a series focusing on the Common Information Model (CIM) and its role in data normalisation. It introduces data models, explaining how they standardise data from multiple sources by aligning different field names and

Splunk for Security: Normalisation – CIM Data Models 101 Read More »

Security Use Cases Enhanced by AI & ML

By Toby Brick

Splunk Presents: Security Use Cases Enhanced by AI & ML Artificial Intelligence and Machine Learning are two of the hottest topics in the technology world right now, with significant potential for solving critical business problems, particularly predicting and preventing security incidents before they occur. So how can AI and ML be implemented within Splunk to

Security Use Cases Enhanced by AI & ML Read More »

Simplifying IoT Data Ingest and Monitoring in Real-Time | Somerford Podcast

By Jack Hancox

Podcast Simplifying IoT Data Ingestion in Real-Time with Lerry Wilson at Splunk Discussing Splunk’s latest IoT data access and processing innovation. Listen on your favourite platform: Spotify youtube iTunes Episode Summary In this episode, we explore the transformative capabilities of the Splunk Edge Hub, in partnership with Splunk. The Edge Hub plays a pivotal role

Simplifying IoT Data Ingest and Monitoring in Real-Time | Somerford Podcast Read More »

Exploring Operational Resilience with Shaun Cooney at Splunk | S05 – E02 | Somerford Podcast

By Jack Hancox

Podcast Exploring Operational Resilience with Shaun Cooney at Splunk Discussing AI, observability, and operational resilience. Listen on your favourite platform: Spotify youtube iTunes Episode Summary James Astley and John Dee are joined by Shaun Cooney from Splunk to discuss AI, observability, and operational resilience. The panel delves into the key talking points from Somerford’s latest

Exploring Operational Resilience with Shaun Cooney at Splunk | S05 – E02 | Somerford Podcast Read More »