In an era where cyber threats move faster than human response times, modern security teams must evolve from reactive triage to autonomous defense. At .conf26, our breakout sessions are built around real outcomes, helping you unify SOC operations, respond autonomously with trusted governance, and close visibility gaps across your entire attack surface. Explore our curated guide to technical sessions, hands-on workshops, and customer panels across Novice, Intermediate, and Advanced skill levels to start building your agenda today!

📦 Data doesn't stop just because connectivity does. For days, the vessel is completely offline — no SQS, no S3, no cloud. Just open water.

TcpOut Persistent Queue is Splunk's latest most practical feature — and the ships-at-sea use case makes it impossible to argue against.

One setting. Local disk. Full backlog recovery.

Here's everything you need to know, including the memory spike issue that can catch you off guard. 👇

Zero Trust isn't just something you buy in a box.  It’s an ongoing operational evidence discipline. In this post, we explore how to break down DoD Zero Trust Execution roadmaps, bridge the gap between SME interpretations and actual technical controls, and leverage open-source Splunk tools like the Splunk App for Zero Trust Execution and AWS-DFD-Visualizer to deliver audit-ready proof of delivery for your CISO.

This month, we're spotlighting a comprehensive new series on working with threat intelligence in Splunk Enterprise Security 8.5. We're also diving into the major agentic upgrade to Splunk AI Assistant v2, and exploring how the new Cisco Security Cloud add-on can transform your SOC operations. Plus, we've got a range of other new articles covering platform performance, data forwarding, and more. Let's get into it! 

Join the final session of our Data Management & Federation Bootcamp Series to explore how Machine Data Lake will reshape modern data strategies. Learn how to manage massive volumes of machine data cost-effectively, support AI-driven workloads, and bring together everything you've learned throughout the series

 In this month’s blog, the agentic era takes center stage. Our two featured topics both explore how AI agents are changing the way teams operate - working alongside humans to investigate, correlate, and resolve issues faster than ever. First, we're spotlighting brand-new content on connecting the Splunk platform to Cisco Cloud Control and AI Canvas, recently unveiled at Cisco Live. Then, we're diving into how the Agentic AI Assistant is transforming observability data into actionable intelligence. Plus, we've got a range of other new articles covering security operations, compliance, and more. Let's get into it!  

Don't work overtime on a Friday threat alert. See how Splunk's AI Assistant in Security accelerates investigations, writes SPL queries, and automatically compiles case reports to reduce MTTR at machine speed.

Continue your journey with Session 3 of the Data Management & Federation Bootcamp Series. Learn how Cisco Data Fabric and Federated Search can help you break down data silos, gain 360° visibility across distributed environments, and accelerate access to insights. 

Step out of the SOC and onto the screen! Apply by June 30 to compete in the Cyber Games: A one-of-a-kind cybersecurity competition series filming in NYC this July.

In this month’s blog we're starting with an important new article that helps you prepare for your upgrade to Splunk Enterprise and Splunk Cloud Platform 10.4. Next, we've published a significant collection of network observability articles featuring Splunk and Cisco products covering everything from campus infrastructure to MPLS backbone monitoring. And finally, we're sharing new content on hardware performance benchmarking, security data onboarding, and more. Let's get into it! 

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that opened up a rift in cyberspace that swallowed you whole! The only way out is through…. The story begins here

So you searched, “what is the name of the usb key inserted by bob smith?” 

Read the article to find out more...

The learning doesn’t stop when .conf ends. Explore the new Best of .conf hub in the Splunk Community to revisit top sessions, watch recordings, and browse presentations organized by role and skill level.

Join the Splunk Agentic Ops Hackathon and build innovative AI-powered solutions across Observability, Security & Platform use cases and compete for a share of $20,000 in prizes and showcase what’s possible when AI meets operational data. Register today to start building. 

Join our May 2026 expert sessions to master end-to-end observability and Enterprise Security. Register now for our webinars, Tech Talks, and EMEA Office Hours.

In this month’s blog we're featuring three topic areas that have seen major new content drops. First, we're exploring the power of SPL2 with a trio of new articles that show you practical ways to put this evolved search language to work. Next, we're diving into new content on integrating Splunk AppDynamics into your observability strategy. And finally, we're sharing a pair of articles that take the pain out of SAML authentication configuration and troubleshooting. Plus, as always, there's plenty more new use cases to explore. Let's get into it! 

If you’re already using the Splunk OTel Java Agent for APM, enabling Secure Application is a drop-in upgrade. This walkthrough covers the exact code changes with a working demo you can clone and run.

Join our April 2026 expert sessions to master database monitoring, AI-driven security, and intelligent data management. Register now to get your questions answered in real-time.

In this month’s blog, we’re sharing brand new use cases for contact centers, critical data management strategies, and new AI-powered analysis tools. We are also thrilled to announce that Japanese translations are now available on Lantern, making our expert content accessible to even more of our global community! Read on to find out more. 

The rules of engagement are being rewritten. Join us as we bridge the gap between telemetry and tactics by connecting Splunk’s Top 50 Cybersecurity Threats with the latest Cisco Talos Year in Review report to reveal exactly how adversaries are operating in the wild today.

Join the global cybersecurity community at RSAC 2026 in San Francisco! Explore the "Power of Community" theme and visit Splunk at Booth N-6144 for live demos on the Agentic SOC and AI-powered detections.

Sharpen your security skills before GovSummit 2026. Join BOTS and Splunk University on April 7 for hands-on attack simulations, CTF competitions, and expert-led training. 

Join our interactive March 2026 sessions to connect with Splunk experts, troubleshoot your deployment, and explore the latest in AI and Security. Register now to get your questions answered in real-time.

Master your data collection strategy with our guide to the Splunk Universal Forwarder. Learn where to download the UF, its key security benefits, and how to automate your installation.

Evolving toward an AI-powered SecOps platform? Join our March 18 Office Hour to discuss Splunk Enterprise Security Essentials vs. Premier with experts Jerald Perry and Neal Dias.

In this blog we’re sharing all the details on more than 30 new articles published on Lantern last month, with a particular focus on the newest best practices for scaling automation and security workflow design. From a comprehensive series on Splunk SOAR playbook architecture to a closer look at the workflow enhancements in Enterprise Security 8.4, we’re providing the blueprints to help you move from manual tasks to sophisticated, high-maturity operations. We’re also delivering new resources for observability and Splunk platform specialists, covering everything from AI-assisted thresholding in ITSI to essential best practices for managing platform certificates and app development. Read on to find out more! 

Join us at Splunk Go in Austin, NYC and Atlanta, where we will unveil new innovations that help you secure, observe, and optimize the entire AI stack.

Don't let downtime compromise your mission. Join us at GovSummit 2026 in D.C. to master AI-powered automation and SecOps modernization for the public sector.

The agentic AI era is moving threats at machine speed. Join our live Splunk Enterprise Security Premier demo on February 26 to learn how to unify your SOC workflows, leverage built-in AI, and accelerate response times across hybrid environments.

A new month is here! Stay ahead of the curve and in the know with our comprehensive list of upcoming Tech Talks, Community Office Hours, and webinars. From insightful discussions to hands-on workshops, there’s something for everyone eager to dive deeper and learn. Don’t miss out — mark your calendars now!