Splunk Enterprise Security

Feature request: Splunk ES investigation collaborator groups

japo86
New Member

I request that there be the ability to create groups of users in enterprise security so that when you need to add them to an investigation you dont have go to through and select your whole team individually, instead you can have group that have those people in them, like group IR and group SOC. If you have team of more than 3 people it gets old having to add them all individually.

I would also request a notes section where you can place notes on the investigation for all collaborators to see.

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

That's what https://ideas.splunk.com is for.

0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...