Looking for some great Executive Level Security Dashboard Templates

[Ted1621]

I don't have Enterprise Security FYI... Just Enterprise Search.  Appreciate your assistance in this matter...

Thanks

[gcusello]

Hi @Ted1621,

if you don't have Enterprise Security, you could see in other Security Apps, if there are some dashboard interesting for your, for example:

• Splunk Security Essentials (https://splunkbase.splunk.com/app/3435),
• Splunk ES Content Update (https://splunkbase.splunk.com/app/3449)
• infosec (https://splunkbase.splunk.com/app/4240),

Then you can see apps for the technologies you have (e.g. Azure or Cisco, etc...).

[Ted1621]

Thank you , I do have all those you mention already.

[gcusello]

Hi @Ted1621,

if you already have these apps, the only following step is Enterprise Security!

I hint this approach because I had to create a SIEM without ES for a customer and it was a very hard work and result wasn't so beautiful as ES.

there's another one App I forgot to report: the Mitre Att&ck App for Splunk (https://splunkbase.splunk.com/app/4617) that's useful to give an high level overview of your security mapping related to Mitre Att&ck.

Ciao.

Giuseppe