Splunk Enterprise Security

Does splunk have any predefined or pre-existing or canned Event Sequences already built?

Splunk_Comm_1
New Member

Does splunk have any predefined or pre-existing or canned Event Sequences already built - and essentially ready to be used - possibly with some minor tweaks

 

Labels (1)
0 Karma

meetmshah
Builder

Hello @Splunk_Comm_1, No there is no OOTB Sequence Template available in ES. You would need to create one yourself.

Blog for reference - https://www.splunk.com/en_us/blog/security/stitching-notables-together-with-event-sequencing.html

 

Please accept the solution and hit Karma, if this helps!

0 Karma
Get Updates on the Splunk Community!

Changes to Splunk Instructor-Led Training Completion Criteria

We’re excited to share an update to our instructor-led training program that enhances the learning experience ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

❄️ Welcome the new year with our January lineup of Community Office Hours, Tech Talks, and Webinars! 🎉 ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...