Community Office Hours

Community Office Hours

View:

Wednesday, May 20, 2026

[Register Here] This thread is for the EMEA Community Office Hours session on Enterprise Security Essentials & Premier on Wednesday, May 20, 2026 at 10 am BST / 11 am CEST. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. While this session is scheduled as an EMEA office hour for time zone convenience, it is open to everyone—if the time works for you, we’d love to have you join us. What can I ask in this AMA? What is available in Splunk Enterprise Security (ES) Premier that is not available in Splunk Enterprise Security (ES) Essentials? What makes Enterprise Security Essentials better than ES 7.X? What new or improved use cases should I expect Premier to help me deliver? What should I consider or prepare if I’m currently using ES Essentials and planning to migrate to ES Premier? What will happen to my dashboards, configurations, and investigations if I upgrade from ES Essentials to ES Premier? What sort of education or professional services are available for me to build an expert practice in ES Essentials or ES Premier? What does the SOAR integration look like for ES Essentials and ES Premier? How does UEBA integrate with ES Premier? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attending

0

0

Thursday, May 21, 2026

Cut Costs, Not Capabilities: Ingest Only What You Need with S3 Promote What are Community Office Hours?: Ask the experts at Community Office Hours! Is an ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. Topic: Cut Costs, Not Capabilities: Ingest Only What You Need with S3 Promote When: Thursday, May 21 | 11AM PDT / 2PM EDT Where: Register Here What to Expect: We will be hosting an "Ask Me Anything" (AMA) session to dive into the technical implementation and best practices. Bring your questions, including: Configuration: How do I configure AWS IAM roles and S3 bucket permissions to grant Splunk Cloud the necessary access to my data? Workflow: What are the steps to configure a new Promote job, and how can I monitor its progress and health within Data Manager? Compatibility: Which data formats does S3 Promote support, and can I use it for custom data types beyond standard AWS source types? Licensing: How does S3 Promote affect my Workload or Ingest-based licensing, and is there a specific SKU required for this feature? Retention: Does Splunk automatically manage the deletion of promoted data, or are there specific best practices for handling data retention? Integration: Can I use S3 Promote to re-ingest data that was originally routed to S3 via Splunk Edge or Ingest Processors? Register Now Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

0 attending

0

0