Splunk Enterprise Security

When will Splunk support blockchains like Bitcoin and Cardano?

flippyflink
New Member

When will Splunk support blockchains?

In a way that Splunk can store and lookup (encrypted) hashes of data in a first generation blockchain like Bitcoin and a third generation blockchain like Cardano.

Sometimes we want to prove that a logfile or Splunk entry was irrefutable not modified. Like in a Court of Justice.

We can be more certain by taking more security measures. But in some cases an employee like an administrator or hacker would theoretically be able to modify entries.

By writing hashes in a blockchain we can irrefutably prove that the data in a Splunk installation has not been modified.

You could even make subscriptions for different frequencies of writing hashes in the blockchain like daily, hourly, per file, etc.

See the full article at medium[dot]com : verifiable-data-hashes-in-blockchain
medium[dot]com/@flippyflink/verifiable-data-hashes-in-blockchain-ef6b1518051f
https://medium.com/@flippyflink/verifiable-data-hashes-in-blockchain-ef6b1518051f

0 Karma

n8
Splunk Employee
Splunk Employee

Great idea 🙂

We (Splunk) are currently have a closed beta running with a small set of customers. The GA date has not been set yet. If you haven't yet, reach out to [email protected] for more info.

This solution (Advanced Data Integrity) is agnostic to the blockchains/DLT. Most of our customers we are speaking with are using Ethereum (both public and private) or Hyperledger. If enough customers are using something else we can add compatibility.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk hasn't announced anything official, except what's on the blog here

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...