Splunk Enterprise Security

Multitenancy in Enterprise Security

jaime_ramirez
Communicator

Hi.

Does anyone know if Multitenancy can be accomplished with a Single Instance of Enterprise Security?

I have searched and read a lot of info but havent came with a definitive answer yet.

Thanks a lot.

0 Karma
1 Solution

jawaharas
Motivator

I don't think so. We need separate instance for different tenant.

More details can be referred here:- https://answers.splunk.com/answers/465361/splunk-enterprise-security-is-it-possible-to-imple.html

View solution in original post

jawaharas
Motivator

I don't think so. We need separate instance for different tenant.

More details can be referred here:- https://answers.splunk.com/answers/465361/splunk-enterprise-security-is-it-possible-to-imple.html

starcher
Influencer

This is correct, ES is not a multi tenant application.

jaime_ramirez
Communicator

Thanks @jawaharas @starcher.

So if we want multitenancy to provide Enterprise Security to multiple silos, it would need an instance for each silo? How the licensing for ES would apply (could I reuse the application for several instances)?

0 Karma

starcher
Influencer

You should talk to your sales rep about licensing and usage scenarios

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...