Splunk ES Archives

Tag: Splunk ES

Getting DarkShield Alerts from Splunk Adaptive Response

by Devon Kozenieski

The Splunk Adaptive Response Framework (ARF) included with Splunk Enterprise Security (ES) allows actions to be taken in response to data. This is done by creating an alert that triggers when a certain search result condition is received in the Splunk ES Search and Reporting app. Read More

Data Masking/Protection

Shedding Light on Dark Data with Splunk ES

by Devon Kozenieski

Splunk Enterprise Security (ES) is a major player in the Security Information and Event Management (SIEM) software market. The cloud-based analytic platform combines the indexing and aggregation capabilities of Splunk Enterprise with a range of fit-for-purpose features attendant to SIEM environments. Read More