Re: How does Elastic X-Pack compares to Splunk MLT...

rosho · ‎08-07-2019

Hi

Has anyone tested the Elastic X-Pack?
I was wondering if it would be better to ingest Elastic data and analyze it with Splunk MLTK. Splunk MLTK seem to me more customizable but it is just my opinion as I am just starting with Elastic.

Thank you

grana_splunk · ‎08-07-2019

Let us know about your findings and difference between the two.

rosho · ‎08-12-2019

Do you know if there is an app to ingest Elastic data? Or if I have to ingest data using .csv files?

grana_splunk · ‎08-12-2019

Use this app : https://splunkbase.splunk.com/app/4175/

or just have a forwarder on Elastic server and monitor the logs in Splunk.

Note : I have never done it myself and it is based on my search here in this community portal.

How does Elastic X-Pack compares to Splunk MLTK?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation