topic Where can I find a list of the standard use cases Splunk comes with? in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490220#M8267 <P>I'm looking for a list of "out of the box" use cases that Splunk comes with - to do a gap analysis between that, and a Splunk SIEM we've taken over.</P> <P>Thanks for any help,</P> <P>Mark</P> Wed, 22 Jan 2020 14:13:28 GMT marktait1971 2020-01-22T14:13:28Z Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490220#M8267 <P>I'm looking for a list of "out of the box" use cases that Splunk comes with - to do a gap analysis between that, and a Splunk SIEM we've taken over.</P> <P>Thanks for any help,</P> <P>Mark</P> Wed, 22 Jan 2020 14:13:28 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490220#M8267 marktait1971 2020-01-22T14:13:28Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490221#M8268 <P>That somewhat depends on if you are looking at Splunk Core, or specifically any of the premium apps like Splunk Enterprise Security (ES) or Splunk IT Service Intelegence (ITSI) or even Splunk UBA.</P> <P>Assuming you are approaching this from a security standpoint the Splunk Security Essentials App <BR /> <A href="https://splunkbase.splunk.com/app/3435/">https://splunkbase.splunk.com/app/3435/</A> lists numerous ootb use cases, and the products they apply to.</P> Wed, 22 Jan 2020 14:28:35 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490221#M8268 nickhills 2020-01-22T14:28:35Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490222#M8269 <P>Hi @marktait1971,<BR /> you could start to see in the following urls:<BR /> <A href="https://docs.splunk.com/Documentation/ES/6.0.0/Admin/Introduction">https://docs.splunk.com/Documentation/ES/6.0.0/Admin/Introduction</A><BR /> <A href="https://docs.splunk.com/Documentation/UseCases/usecases/Security/Summary">https://docs.splunk.com/Documentation/UseCases/usecases/Security/Summary</A><BR /> <A href="https://docs.splunk.com/Documentation/ES/6.0.0/Usecases/Overview">https://docs.splunk.com/Documentation/ES/6.0.0/Usecases/Overview</A></P> <P>then this video is very useful:<BR /> <A href="https://www.splunk.com/en_us/resources/videos/splunk-enterprise-security-use-case-library.html">https://www.splunk.com/en_us/resources/videos/splunk-enterprise-security-use-case-library.html</A></P> <P>Ciao.<BR /> Giuseppe</P> Wed, 22 Jan 2020 14:30:45 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490222#M8269 gcusello 2020-01-22T14:30:45Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490223#M8270 <P>Thank you - those are useful, but is there a simple list of use cases listed anywhere that you know of?</P> Wed, 22 Jan 2020 14:50:51 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490223#M8270 marktait1971 2020-01-22T14:50:51Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490224#M8271 <P>Thank you - I found it via your link: <A href="https://docs.splunksecurityessentials.com/content-detail/">https://docs.splunksecurityessentials.com/content-detail/</A></P> Wed, 22 Jan 2020 14:52:28 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490224#M8271 marktait1971 2020-01-22T14:52:28Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490225#M8272 <P>They are updated very frequently, and are only (to my knowledge) completely detailed in the Security Essentials App (which is updated just as frequently) </P> <P>Just an addendum - they are also detailed inside ES, but unless you have access to ES, that is of less help.</P> Wed, 22 Jan 2020 14:53:43 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490225#M8272 nickhills 2020-01-22T14:53:43Z Re: Where can I find a list of the standard use cases Splunk comes with? https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490226#M8273 <P>maybe this could be useful<BR /> <A href="https://docs.splunk.com/Documentation/ESSOC/1.0.48/stories/UseCase">https://docs.splunk.com/Documentation/ESSOC/1.0.48/stories/UseCase</A></P> <P>Ciao.<BR /> Giuseppe</P> Wed, 22 Jan 2020 14:59:21 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Where-can-I-find-a-list-of-the-standard-use-cases-Splunk-comes/m-p/490226#M8273 gcusello 2020-01-22T14:59:21Z