Community Office Hours

Community Office Hours

Wednesday, July 16, 2025

[Register Here] This thread is for the Community Office Hours session on Data Management in Security on Wed, July 16, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the best practices for managing and optimizing security data ingestion in Splunk? How can I improve the efficiency of my security data pipelines? How do I properly map security logs to the Common Information Model (CIM)? How to ensure accuracy and consistency with large volumes of data across multiple security log sources? How should I structure my security data for faster investigations and threat hunting? What role does AI/ML play in managing and analyzing security data in Splunk? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

0

Wednesday, August 20, 2025

[Register here] This thread is for the Community Office Hours session on Security: Enterprise Security on Wed, Aug 20, 2025 at 1pm PT / 4pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What are the latest updates in Splunk Enterprise Security? How can I implement Risk-based alerting (RBA)? How can I utilize Threat Intelligence Management and Cisco Talos for better context? How do I access the latest out-of-the box detections? Which Splunkbase apps and add-ons are recommended for Splunk Enterprise Security use cases? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

0

Wednesday, December 10, 2025

[Registration Coming Soon] This thread is for the Community Office Hours session on Security: Splunk SOAR on Wednesday, Dec 10, 2025 at 11 am PT / 2 pm ET. Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics. What can I ask in this AMA? What’s new in the latest Splunk SOAR? Should I upgrade to this version, and what’s the easiest way to make the upgrade happen? How does the Splunk Attack Analyzer integration work? And how can playbooks be implemented to automate response processes for the malware and phishing attack? What are the practical ways to modernize legacy SOC workflows with Splunk Enterprise Security and build the TDIR workflow. How to use Wayfinder? How to measure the value of my SOAR investment? Real-world examples of how SOAR enhancements improved efficiency, security, and ROI? Anything else you’d like to learn! Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attending

0

0