The ObserveIT (Proofpoint) On-Prem Technology Add-On for Splunk provides security analysts and investigation teams with powerful user activity meta-data and smart user behavior alerts. By correlating this powerful user context with other data sources in Splunk, a complete picture of users’ activity will emerge, allowing for creation of smarter alerts and quicker threat elimination. Data collected by ObserveIT On-Prem TA can be searched using the Search App or ObserveIT (Proofpoint) On-Prem App for Splunk.