Splunk collects, indexes and harnesses all the fast moving machine data generated by your applications, servers and devices - physical, virtual and in the cloud.
Use Splunk to search, alert and report in real time on any user, network, system or application activity, configuration changes, and other IT data from one place. Eliminate the need for multiple consoles and follow the trail of an attacker from one place. Perform more in-depth analysis and respond to incidents faster and more thoroughly, lowering your risk and exposure.
[Splunk IT Search]
* Accelerate incident response
* Lower exposure and risk
* Identify unanticipated threats before exposure occurs
* Continuously observe the changing threat landscape
* Eliminate false positives
* Make your people smarter and more effective
Use Splunk for:
Splunk will be the first place you turn when you get an alert or a report of any suspicious activity.
Its easy to monitor security events across the IT stack. Search for traffic violations in your router and firewall logs, find access violations on servers and applications, or look for unauthorized or unsafe configuration changes
Splunk gives you the power to make sophisticated fraud detection a reality.
Equip your organization with the flexible analysis capability you need to detect insider threat of all kinds.
Splunk gives you a single place to generate reports across all of your IT infrastructure and technologies.
With an Enterprise Splunk license you can index from 500 MB/day and get access to the following additional features;
* Receive data routed from other Splunk servers
* Distributed search and clustering
* Access controls and multiple user accounts
* Deployment server
* Download Splunk here
Splunk's pricing model is simple - licensed perpetually, pricing is based on the peak daily volume of raw uncompressed data indexed. If you need to increase your license to index more data later on, you can upgrade at anytime.
CSO Perspectives Roadshow Interview - Silas Barnes, Group Chief Information Security Officer, Virgin Australia Group
CSO Perspectives Roadshow 2017 Showreel
CSO Perspectives Roadshow Interview - Jeff Lanza, Retired FBI Agent (USA)
CSO Perspectives Roadshow Interview - Mark Loveless "Simple Nomad" Senior Security Researcher at Duo Security
Panel Session sponsored by VMware, Application Security: Does moving your applications to the Cloud mean reduced risk or just relocated risk?