Splunk Enterprise Security

Does ES have all the features available in Splunk Security Essentials App?

damode
Motivator

Does ES also comes with SSE app features like Analytics Advisor, Content Recommendations, Data inventory, CIM compliance check etc ?

I found these features really useful for data source assessment.

Labels (2)
0 Karma

samin
Engager

In ES I can see use cases from other apps like SA-Threatintelligence, SA-Accessprotection etc. Aren't SSE contents  visible in ES?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

ES and SSE are complimentary products.  If you buy ES you may still need SSE.

---
If this reply helps you, Karma would be appreciated.
0 Karma

SamHTexas
Builder

Rich, / Any one who have used Security Essentials. Do you by any chance have any leads on how to configure the security Essentials? I have spent hours, not able to make it go. When you click on Configure pull down in Sec essentials & try to add an add-on that it asks of integrate it with ES. You just watch the spinning wheel turn & turn. Also the use case are not able to be accessed. Please advise

Tags (1)
Get Updates on the Splunk Community!

Mastering Threat Hunting

Watch NowWatch an insightful talk where we dive into the world of threat hunting, exploring the key ...

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...