Product News & Announcements
All the latest news and announcements about Splunk products. Subscribe and never miss an update!

Security Newsletter | September 2023

Splunk Employee
Splunk Employee


Security Header.png



September 2023 


Splunk SOAR Version 6.1.1 is Now Available

The latest version of Splunk SOAR launched on September 6th. Version 6.1.1 adds some new condition options to the Visual Playbook Editor and also provides users with the ability to convert classic playbooks into the current Visual Playbook Editor format through a new CLI conversion tool. Other updates include support for PostgreSQL version 15 for deployment and standalone, non-clustered environments can now run diagnostic commands and upload the resulting logs directly to Splunk Support. For more information, be sure to check out the latest release notes for the on-prem and cloud versions.


Splunk Enterprise Security 7.2 is Now Available

In our latest release of Splunk Enterprise Security 7.2, we introduce capabilities that deliver an improved workflow experience for simplified investigations; enhanced visibility and reduced manual workload; and customized investigation workflows for faster decision-making. You can find this version on Splunkbase! Release notes can be found here.


Splunk User Behavior Analytics (UBA) 5.3

The latest release of Splunk User Behavior Analytics (UBA) 5.3 introduces three new models and 20 Node XL cluster for extraordinary scale and scope. Read the release blog to learn more about UBA 5.3 and the blog for detecting Lateral Movement Using Splunk User Behavior Analytics


Splunk Threat Briefing: Newest Observed TTPs in the Wild 

Watch the on demand recording of the Splunk Threat Research Team showcasing the entire exploitation sequence of the latest remote access trojans (RATs), destructive payloads and post-exploitation techniques. The team also highlights related security content developed to enhance your defenses.


2023 Gartner Market Guide for SOAR 

If your team is looking to evaluate how security orchestration, automation and response (SOAR) can support and optimize your security operations, download a copy of the 2023 Gartner Market Guide for SOAR. 


New blogs to help you make the most of Splunk Security 


Security Content from the Splunk Threat Research Team
The Splunk Threat Research Team has had four releases of security content in the last month, which provide 24 new detections, 27 updated detections and 8 new analytic stories. Read the Product News & Announcements post to learn more.


Use Case Explorer

See and read about our completely updated Use Case Explorer content on Splunk Lantern!  You can find prescriptive guidance from Splunk that will guide you on your digital resilience journey from foundational visibility to optimized experiences.




Platform Updates

Flatten the SPL Learning Curve: Introducing Splunk AI Assistant for SPL

Learn more about the preview of Splunk’s generative AI offering! Read this blog to discover how the Splunk AI Assistant uses an AI-powered chat experience to help new users quickly get up to speed with SPL and advanced users unlock more out of Splunk by providing query suggestions, explanations, and detailed breakdowns.


Fastest Time-to-Value Anomaly Detection in Splunk: The Splunk App for Anomaly Detection 1.1.0

Brand new to ML and looking for an easy way to get started? Check out the Splunk App for Anomaly Detection to help you find anomalies in your dataset in just a few clicks! You can unlock the power of ML in your everyday workflows, while also simplifying tasks that are historically complex and time consuming. 

Looking for more AI and ML content? Check out the new AI and ML tab on the Essentials Board to kickstart your journey.


October 2023 Customer Advisory Boards

Sign up and join our October 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up!

Contact us at with any questions.




Tech Talks, Office Hours and Lantern


Tech Talks

Security Edition | There's No Place Like Chrome...and the Splunk Platform!
September 26 at 11 am PT

Platform Edition |  Introduction to Splunk AI September 27 at 11 am PT


Security Webinar

Build Scalable Security while Migrating to Cloud Best Practices from Clayton Homes
Wednesday, October 11, 11 am PT - 12 pm PT



Community Office Hours

Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance on all things OpenTelemetry, Risk-Based Alerting, and Enterprise Security. Limited Spots Available - Register Now!



Splunk Lantern 

Did You Know: Splunk Edge Processor common use cases

Use Splunk Edge Processor to accelerate your pre-ingest data transformation capabilities! Let Splunk Lantern walk you step-by-step through two common use cases to help you get started: masking IP addresses and routing designated events to specific indexes.




Education Corner



Cybersecurity Education is a Hot Topic 

If you’re in the U.S., you may have heard about the Biden administration’s National Cyber Workforce and Education Strategy announced on July 31, 2023. It’s kind of a big deal. One key objective is to address the shortage of cybersecurity professionals in the U.S., which leans heavily into enhancing cyber skills education. At Splunk, we've had our eyes on this for a while, which is why we continue to offer free cybersecurity and skills training – available and accessible anywhere, anytime. We have a curriculum of over 40 free self-paced courses – including our newest,  “The Cybersecurity Landscape” and “Security Operations and the Defense Analyst.” Plus, an entire catalog of self-paced training with labs and instructor-led courses. 


Splunk Education Spans the Globe

Have you ever wondered how you can access Splunk Education Training and Certification in your own region, in your own language, with local support? Well wonder no more! The Splunk Authorized Learning Partner (ALP) program is an extension of Splunk Education – offering you access to the quality of education you've come to expect from us. ALPs offer courses that dive into Cloud, Security, and Observability for administrators, architects, and users – in your language, timezone, and location. Find out more about our global learning partners today. 





Talk with us about Splunk!

The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitationWe look forward to hearing from you!





Until next month,

Happy Splunking


Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...