Splunk Enterprise Security

Multitenancy in Enterprise Security

jaime_ramirez
Communicator

Hi.

Does anyone know if Multitenancy can be accomplished with a Single Instance of Enterprise Security?

I have searched and read a lot of info but havent came with a definitive answer yet.

Thanks a lot.

0 Karma
1 Solution

jawaharas
Motivator

I don't think so. We need separate instance for different tenant.

More details can be referred here:- https://answers.splunk.com/answers/465361/splunk-enterprise-security-is-it-possible-to-imple.html

View solution in original post

jawaharas
Motivator

I don't think so. We need separate instance for different tenant.

More details can be referred here:- https://answers.splunk.com/answers/465361/splunk-enterprise-security-is-it-possible-to-imple.html

starcher
SplunkTrust
SplunkTrust

This is correct, ES is not a multi tenant application.

jaime_ramirez
Communicator

Thanks @jawaharas @starcher.

So if we want multitenancy to provide Enterprise Security to multiple silos, it would need an instance for each silo? How the licensing for ES would apply (could I reuse the application for several instances)?

0 Karma

starcher
SplunkTrust
SplunkTrust

You should talk to your sales rep about licensing and usage scenarios

0 Karma
Get Updates on the Splunk Community!

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through: An introduction to the Splunk Threat ...