Splunk Enterprise Security

Complete list and descriptions of pre-configured correlation searches in ES 4.0

javiergn
Super Champion

Hi all,

On a similar note to this question, I would also like to know the complete list of pre-configured correlation searches available in ES 4.0

We don't have ES installed and therefore I can't run the rest query suggested there, but I need this information in order to discuss the list internally before we can proceed with the POC and evaluation.

Thanks,
Javier

0 Karma
1 Solution

javiergn
Super Champion

Actually I'm going to answer myself as I just discovered I can have my own ES instance online and it's free for the next 15 days.

View solution in original post

saurabh_tek
Communicator

Hello Javiergn,
Although you have figured out yourself about the Enterprise security sandbox (link : http://blogs.splunk.com/2015/09/24/try-splunk-enterprise-security-for-free/). Now you can see the searches and queries running to power them. - Saurabh

0 Karma

javiergn
Super Champion

Actually I'm going to answer myself as I just discovered I can have my own ES instance online and it's free for the next 15 days.

Get Updates on the Splunk Community!

Announcing the Expansion of the Splunk Academic Alliance Program

The Splunk Community is more than just an online forum — it’s a network of passionate users, administrators, ...

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...