NOVEMBER 2023  Enhance Security Visibility and Simplify Investigations for Faster Threat Response with Splunk Enterprise Security In the face of an ever-increasing volume of cyberattacks, and a limited security workforce to combat those attacks, a best-in-class SIEM can enhance security visibility and simplify investigations for faster threat response. Splunk Enterprise Security delivers enhanced security visibility with Splunk Enterprise Security 7.2, and helps SOCs simplify security investigations with risk-based alerting and Splunk Enterprise Security’s unified workflow experience, Mission Control. Read the latest blog across Splunk Security, Observability, and Platform innovations to learn more about how Splunk Enterprise Security is changing the game for SOCs around the world.  Security Content from the Splunk Threat Research Team The Splunk Threat Research Team has had two releases of security content in the last month, which provide 22 new detections, 6 new analytic stories and 3 updated analytic stories. Read the Product News & Announcements post to learn more and check out the latest blogs to help you stay ahead of threats:  More Than Just a RAT: Unveiling NjRAT's MBR Wiping Capabilities Detect WS_FTP Server Exploitation with Splunk Attack Range  Introducing Splunk Add-On for Splunk Attack Analyzer and Splunk App for Splunk Attack Analyzer Following the announcement of Splunk Attack Analyzer at .conf23, we are excited to announce the launch of the Splunk Add-on for Splunk Attack Analyzer and Splunk App for Splunk Attack Analyzer. These apps work together to ingest data from Splunk Attack Analyzer into the Splunk platform and provide out of the box dashboards to give security leaders insight into solution submission trends, patterns in threat volume trends, and phish kit and malware family trends. Learn more in the blog.  The Latest from SURGe  The SURGe security research team has updated their macro-level ATT&CK trending insights for 2023.  Check out the latest podcasts on The Security Detail Episode 8: The Technology Sector with Sean Heide Episode 9: Education with Brett Callow Episode 10: Aviation with Richard Waine Explore the latest Coffee Talk with SURGe interviews featuring: Michael Rodriguez, Principal Strategic Consultant for Google Public Sector Patrick Gray, host of the Risky Biz podcast Sherrod DeGrippo, Director of Threat Intelligence Strategy at Microsoft Jamie Williams, MITRE ATT&CK for Enterprise Lead and Principal Adversary Emulation Engineer Infosec Multicloud App for Splunk The Infosec App for Splunk is designed to address the most common security use cases, including continuous monitoring and security investigations. The new Infosec Multicloud App for Splunk is designed by our field team to help customers that have a cloud environment. In addition to views of security posture across cloud providers, the app includes a billing dashboard for a high level overview of costs spread across your various cloud providers. Read the blog to learn more details and the steps needed to install and configure the Infosec Multicloud app for Splunk. The Great Resilience Quest continues at full momentum   The Great Resilience Quest continues to welcome challengers until the end of January 2024. This gamified adventure teaches you how to implement key Splunk use cases on the path to digital resilience. Conquer each level by completing bite-sized learning activities and quizzes. With amazing prizes still up for grabs, every moment counts. Join the quest today!    Platform Updates Build Digital Resilience Through Expanded Access to Decentralized Data In his recent blog, Tom Casey, SVP Products & Technology for Splunk discusses several recent Splunk Platform innovations enabling customers to build digital resilience through expanded access to decentralized data, enabling better understanding of customer-facing issues, regardless of whether the data sits in Splunk or cost effective Amazon S3 storage, facilitating compliance with data sovereignty requirements.   Build Scalable Security While Moving to Cloud Now available as an on-demand webinar, hear from Clayton Homes on how to build scalable security while moving to the cloud successfully and efficiently with Splunk. By deploying Splunk Enterprise Security, a data-centric modern information and event management (SIEM) solution in the cloud, Clayton Homes was able to detect and respond to threats quickly while gaining end-to-end visibility across their IT environment with Splunk Cloud Platform (SaaS solution). Model Assisted Threat Hunting Powered by PEAK & Splunk AI Accelerate threat hunting with Splunk AI as a catalyst. Join us to learn how to leverage the PEAK threat hunting framework and Splunk AI to find malware dictionary-DGA domains. Learn the basics of the PEAK threat hunting framework developed by Splunk’s SURGe security research team, understand the power Splunk AI can bring to your threat hunts and see how to create automated detections from your successful hunts. Splunk App for Data Science and Deep Learning - What’s New in Version 5.1.1 In the ever-evolving world of data science, keeping your tools and software up to date is essential. This ensures that you have access to the latest features, security updates and bug fixes. The team behind our data science app has been hard at work to bring you the most robust and secure version yet. Explore our recent blog to dive into what's new in the recently released Splunk App for Data Science and Deep Learning (DSDL) version 5.1.1 available on Splunkbase. Machine Learning in General, Trade Settlement in Particular The recent T+1 compliance directive —which mandates that all USA trades starting in May 2024 be settled in at most one day — is the driving force behind wanting to provide resilience to the trade settlement process. Explore this hands on blog on using Splunk Machine Learning Toolkit to predict whether a trade settlement in the financial services industry will fail to be completed. Tech Talks, Office Hours and Lantern Tech Talks Advance Your App Development with the Visual Studio Code Extension Register Now  and join us on Wednesday, November 15, 2023. See the latest on the Visual Studio Code Extension for Splunk SOAR and how you can make developing apps a breeze. ICYMI: What’s New in Splunk SOAR 6.2?  Watch the Replay   Streaming Lookups with Splunk Edge Processor Register Now  and join us on Thursday, November 16, 2023 to learn how best to leverage lookups to optimize costs and maintain data fidelity, explore use cases for this capability that drive business outcomes, and review other ways to optimize your data management strategy using Edge Processor.   Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance.  Security: SOAR - Wed, Nov 29  (Register here) Splunk Search - Wed, Dec 13  (Register here)   Splunk Lantern  In this month’s blog we’re highlighting some great new updates to our Getting Started Guide for Enterprise Security (ES) that provide you with easy ways to get going on this powerful platform, as well as new data articles for MS Teams. As usual, we’re also sharing the rest of the new articles we’ve published this month.  Read on to see what’s new. Education Corner A Steady Drumbeat of New and Updated Splunk Training  Can you hear it? That’s the sound of new Splunk Education courses dropping on a regular! You can always search the Splunk Training and Enablement Platform (STEP) for courses that align with your observability learning journey, or check out our October Release Announcements. And, don’t forget to check in with your Org Manager if you’re looking to enroll in paid training using your company’s Training Units. Get curious about what's possible with Splunk. ... View more

NOVEMBER 2023  OpenTelemetry Insights Page Now Provides Visibility to Your GCP and Azure Hosts  Splunk Observability customers with GCP and Azure integrations now have access to the OpenTelemetry insights view within the UI. The OpenTelemetry insights page, accessed via the Data Management module, gives you a complete view of your host’s inventory, including a full list of instances, the deployment status of the OpenTelemetry Collector for each instance, and the version. This view is already available for AWS EC2 hosts.  Discover Our New and Improved Time Picker! 250,000 - That’s the number of times the Time Picker component within Observability Cloud is clicked on each month. A critical feature in the investigation journey, Time Picker allows engineers to easily and quickly determine the time frame of their analyses. For this reason, we’re launching a new version that not only fixes bugs but also includes new functionalities such as type-ahead behavior and additional timestamp formats that enhance developer experience and accelerate workflows. Find out more here! Integrating REST endpoints with Splunk On-Call Available now in the Observability Use Case Explorer!  A brand new use case for Splunk On-Call with a focus on sending customized alerts and incident details from your proprietary and open-source monitoring tools into the Splunk On-Call timeline.  Read all about it here! NOW AVAILABLE: Unified Identity enhancements Get more control over which Splunk Cloud user can access Observability Cloud! We’re introducing a new custom “o11y_access” role for admins to restrict who can create an Observability Cloud user and enjoy the Unified Identity/SSO capability. Check out our updated docs for more details. ICYMI: Check Out The Latest Observability Blog Posts Announcing the General Availability of Splunk RUM Session Replay Why Does Observability Need OTEL? The Great Resilience Quest continues at full momentum   The Great Resilience Quest continues to welcome challengers until the end of January 2024. This gamified adventure teaches you how to implement key Splunk use cases on the path to digital resilience. Conquer each level by completing bite-sized learning activities and quizzes. With amazing prizes still up for grabs, every moment counts. Join the quest today!    Platform Updates Build Digital Resilience Through Expanded Access to Decentralized Data In his recent blog, Tom Casey, SVP Products & Technology for Splunk discusses several recent Splunk Platform innovations enabling customers to build digital resilience through expanded access to decentralized data, enabling better understanding of customer-facing issues, regardless of whether the data sits in Splunk or cost effective Amazon S3 storage, facilitating compliance with data sovereignty requirements.   Explore the new Log Analytics for IT Troubleshooting Splunk Use Case Page Splunk Observability Log Analytics for It Troubleshooting allows customers to get comprehensive visibility, at scale with Splunk Platform. Accelerate innovation and IT troubleshooting in complex hybrid environments. Explore the use case here. Splunk Observability – The Latest Innovations To Perfect UX Splunk helps you prioritize the right issues and make faster and better decisions through proactive and smarter alerting, richer data, and simpler workflows. Join this webinar for a first look at these new features that can help you quickly resolve customer-facing issues to deliver great user experiences (UX). Featuring product demonstrations of Session Replay, Edge Processor, OpenTelemetry, and Federated Search for Amazon S3. Splunk App for Data Science and Deep Learning - What’s New in Version 5.1.1 In the ever-evolving world of data science, keeping your tools and software up to date is essential. This ensures that you have access to the latest features, security updates and bug fixes. The team behind our data science app has been hard at work to bring you the most robust and secure version yet. Explore our recent blog to dive into what's new in the recently released Splunk App for Data Science and Deep Learning (DSDL) version 5.1.1 available on Splunkbase. Machine Learning in General, Trade Settlement in Particular The recent T+1 compliance directive —which mandates that all USA trades starting in May 2024 be settled in at most one day — is the driving force behind wanting to provide resilience to the trade settlement process. Explore this hands on blog on using Splunk Machine Learning Toolkit to predict whether a trade settlement in the financial services industry will fail to be completed.  Tech Talks, Office Hours and Lantern Tech Talks OpenTelemetry: What’s Next. Logs, Profiles, and More Register Now  and join us on Tuesday, November 14, 2023. You’ll learn about OpenTelemetry's new logging functionality, including its two logging paths, the benefits of each, real-world production examples and so much more! ICYMI: Starting With Observability: OpenTelemetry Best Practices. Watch the Replay   Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance.  Security: SOAR - Wed, Nov 29  (Register here) Splunk Search - Wed, Dec 13  (Register here)   Splunk Lantern  In this month’s blog we’re highlighting everything that’s new on Lantern this month, with new data articles for MS Teams as well as brand new use cases, product tips and data descriptors. Read on to see what’s new.   Education Corner A Steady Drumbeat of New and Updated Splunk Training  Can you hear it? That’s the sound of new Splunk Education courses dropping on a regular! You can always search the Splunk Training and Enablement Platform (STEP) for courses that align with your observability learning journey, or check out our October Release Announcements. And, don’t forget to check in with your Org Manager if you’re looking to enroll in paid training using your company’s Training Units. Get curious about what's possible with Splunk.   Hola! Say Hello to Our Translated Content It’s a big world out there – with 8 billion people and about 7,000 languages spoken. Splunk Education is determined to get closer to as many of these people as possible by publishing training and certification in more diverse languages. We are pleased to share that we now offer free, self-paced eLearning courses with Spanish captions. Watch for more translated content and captions coming soon, Mucho gusto! Talk with us about Splunk!   The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!     Until Next Time, Happy Splunking ... View more

NOVEMBER 2023  GovSummit 2023 Registration is open for Splunk’s largest, free annual event for government and agency leaders and decision-makers. We’re looking forward to bringing together government IT and security professionals for industry-leading event. Hear firsthand from government and industry experts about how agencies are adapting and thriving — and building digital resilience to improve their cyber strategy.     Event Details: Ronald Reagan Building and International Trade Center, Washington, D.C. Wednesday, December 14, 2023 | 7:30 am - 4:30 pm EST Workshops: Splunk offers free virtual workshops. Join the top technical experts at Splunk for hands-on learning on Splunk SOAR, Insider Threat, and Enterprise Security.  Times vary and there is no cost to attend.   11/16 Security Lunch & Learn, 1:00 - 4:00 ET, Registration Page 11/30 Splunk 4 Rookies, 1:00 - 4:00 ET, Registration Page 12/7 IT Foundations, 1:00 - 2:30 ET, Registration page Booth and Table Top Events: Be sure to stop by and see Splunk to learn about the latest trends at these industry events: 11/15 NLC City Summit 2023, Atlanta, GA 11/16 CyberTalks, Washington, DC 11/27 AWS re:Invent, Las Vegas, NV 12/3-6 Center for Technology CIO Roundtable, Sea Island, GA 12/7 Pennsylvania Digital Government Summit, Harrisburg, PA 12/13 CMS Industry Days, Baltimore, MD 12/14 GovSummit, Washington, DC 12/15 DoDIIS, Portland, OR New Research Report for Today’s Security Leaders: The CISO Report  is officially here!  Check out the results of our original research including emerging trends, threats and strategies that offer insight for today’s security leaders. Platform Updates Build Digital Resilience Through Expanded Access to Decentralized Data In his recent blog, Tom Casey, SVP Products & Technology for Splunk discusses several recent Splunk Platform innovations enabling customers to build digital resilience through expanded access to decentralized data, enabling better understanding of customer-facing issues, regardless of whether the data sits in Splunk or cost effective Amazon S3 storage, facilitating compliance with data sovereignty requirements.   Model Assisted Threat Hunting Powered by PEAK & Splunk AI Accelerate threat hunting with Splunk AI as a catalyst. Join us to learn how to leverage the PEAK threat hunting framework and Splunk AI to find malware dictionary-DGA domains. Learn the basics of the PEAK threat hunting framework developed by Splunk’s SURGe security research team, understand the power Splunk AI can bring to your threat hunts and see how to create automated detections from your successful hunts. Explore the new Log Analytics for IT Troubleshooting Splunk Use Case Page Splunk Observability Log Analytics for It Troubleshooting allows customers to get comprehensive visibility, at scale with Splunk Platform. Accelerate innovation and IT troubleshooting in complex hybrid environments. Explore the use case here. Splunk Observability – The Latest Innovations To Perfect UX Splunk helps you prioritize the right issues and make faster and better decisions through proactive and smarter alerting, richer data, and simpler workflows. Join this webinar for a first look at these new features that can help you quickly resolve customer-facing issues to deliver great user experiences (UX). Featuring product demonstrations of Session Replay, Edge Processor, OpenTelemetry, and Federated Search for Amazon S3. Splunk App for Data Science and Deep Learning - What’s New in Version 5.1.1 In the ever-evolving world of data science, keeping your tools and software up to date is essential. This ensures that you have access to the latest features, security updates and bug fixes. The team behind our data science app has been hard at work to bring you the most robust and secure version yet. Explore our recent blog to dive into what's new in the recently released Splunk App for Data Science and Deep Learning (DSDL) version 5.1.1 available on Splunkbase. Tech Talks, Office Hours and Lantern Tech Talks OpenTelemetry: What’s Next. Logs, Profiles, and More Register Now  and join us on Tuesday, November 14, 2023. You’ll learn about OpenTelemetry's new logging functionality, including its two logging paths, the benefits of each, real-world production examples and so much more! Advance Your App Development with the Visual Studio Code Extension Register Now  and join us on Wednesday, November 15, 2023. See the latest on the Visual Studio Code Extension for Splunk SOAR and how you can make developing apps a breeze. Streaming Lookups with Splunk Edge Processor Register Now  and join us on Thursday, November 16, 2023 to learn how best to leverage lookups to optimize costs and maintain data fidelity, explore use cases for this capability that drive business outcomes, and review other ways to optimize your data management strategy using Edge Processor. ICYMI:  What’s New in Splunk SOAR 6.2?  Watch the Replay Starting With Observability: OpenTelemetry Best Practices. Watch the Replay   Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance.  Security: SOAR - Wed, Nov 29  (Register here) Splunk Search - Wed, Dec 13  (Register here)   Splunk Lantern  In this month’s blog we’re highlighting some great new updates to our Getting Started Guide for Enterprise Security (ES) that provide you with easy ways to get going on this powerful platform, as well as new data articles for MS Teams. As usual, we’re also sharing the rest of the new articles we’ve published this month.  Read on to see what’s new. Education Corner Creating Inclusive Learning Spaces at Splunk October was National Disability Employment Awareness Month (NDEAM). At Splunk, we are grateful that our community is made up of all types of people, with all types of experiences and points of view. This diversity creates interest, sparks innovation, and fosters growth. Find out how Splunk supports NDEAM and weaves this awareness into its Splunk Education programs in our latest blog.    Hola! Say Hello to Our Translated Content It’s a big world out there – with 8 billion people and about 7,000 languages spoken. Splunk Education is determined to get closer to as many of these people as possible by publishing training and certification in more diverse languages. We are pleased to share that we now offer free, self-paced eLearning courses with Spanish captions. Watch for more translated content and captions coming soon, Mucho gusto! Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you! Want to learn more about resources from Splunk!  View Our Infographic to learn, get help and play with Splunk. Until Next Time, Happy Splunking ... View more

    OCTOBER 2023  See More, Act Faster, and Simplify Investigations with Splunk Enterprise Security 7.2 The latest release of Splunk Enterprise Security 7.2 introduces capabilities that deliver an improved workflow experience for simplified investigations; enhanced visibility and reduced manual workload; and customized investigation workflows for faster decision making. Learn more about the release in our blog, our Product News & Announcement Post and join the Tech Talk to watch the Splunk team walk through the new capabilities.  New to Enterprise Security? Check out The Beginner’s Guide to Security Monitoring for Enterprises. Splunk Mission Control 3.0 Release We’re happy to announce the release of Mission Control 3.0 which includes several new and exciting features made available to Splunk Enterprise Security Cloud users. Read the Splunk Community post to learn more about the new features available with this release. Security Content from the Splunk Threat Research Team The Splunk Threat Research Team released 8 new detections and 1 new analytic story in the last month. Read the Product News & Announcements post to learn more. The team also published the following blogs: Sharing is Not Caring: Hunting for Network Share Discovery Defending the Gates: Understanding and Detecting Ave Maria (Warzone) RAT Mockbin and the Art of Deception: Tracing Adversaries, Going Headless and Mocking APIs New blogs to help you make the most of Splunk Security Revisiting the Big Picture: Macro-level ATT&CK Updates for 2023 Threat Hunting for Dictionary-DGA with PEAK Deep learning in security: text-based phishing email detection with BERT model The PEAK Threat Hunting Framework  The PEAK Threat Hunting Framework takes the experience of top threat hunters and translates their insights to help you gain the most value from threat hunting across your entire security operations. Download your copy of “The PEAK Threat Hunting Framework” to discover more about the framework, including new hunt types and processes, defined deliverables, actionable metrics, and prioritized detection types.  See PEAK in action during our Model-Assisted Threat Hunting Powered by PEAK and Splunk AI webinar.  Unveiling the Complete Great Resilience Quest! We are excited to announce the release of the final two levels - “Proactive Response” & “Optimized Experiences” of the Great Resilience Quest! You can now fully explore your path to resilience and learn more about implementing security use cases in this interactive experience.    Platform Updates The Business Case for Unifying Security and Observability  As businesses and government organizations become more digital, more and more systems become mission-critical.  Given the potential business impact, executives and board members should accept these as business issues, ensuring system security and resilience must be addressed as part of business planning, risk management, and operations. Dive into the research from the Enterprise Strategy Group and Splunk to learn more. Introducing Federated Search for Amazon S3 for Splunk Cloud Platform Splunk is pleased to announce the general availability of Federated Search for Amazon S3, a new capability that allows you to search data from Amazon S3 buckets directly from Splunk Cloud Platform without the need to ingest it.  Enterprises Realize Benefits from Migrating to Cloud with Splunk Hear from other customers, leaders and practitioners who chose migrating to Splunk Cloud Platform as a better way to drive business value, efficiency and scale. Syslog in Splunk Edge Processor Supercharges Security Operations with Palo Alto Firewall Log Reduction Splunk Edge Processor now supports syslog-based ingestion protocols, making it well-equipped to wrangle complex and superfluous data. Users can deploy Edge Processor as an end-to-end solution for handling syslog feeds such as PAN logs, including the functionality to act as a syslog receiver, process and transform logs and route the data to supported destination(s). Go beyond the buzz and start harnessing the power of ML and AI Learn about the different AL/ML features across Splunk and leverage the recommended apps and use cases. Check out the new AI and ML tab on the Essentials Board to kickstart your journey. IDC Report: Enterprises Report Benefits of Migrating to Splunk Cloud Platform As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus more on driving business value, efficiency and scale. Moving deployments to the cloud delivered as a software-as-a-service (SaaS) offers a win-win for current Splunk customers. In this analyst report, IDC examines the drivers and benefits that drove these enterprises to migrate deployments from on-premises to Splunk Cloud Platform delivered as a service. Customers documented for IDC the various business outcomes and benefits after migrating to the cloud and shared their journeys. Tech Talks, Office Hours and Lantern Tech Talks What’s New In Splunk SOAR? Join the Splunk SOAR team as they share more on the latest and greatest updates in Splunk SOAR. Register Now > Nov 8 - What’s New in Splunk SOAR 6.2 Nov 15 - Advance Your App Development with the Visual Studio Code Extension Streamline Data Ingestion with Deployment Server Essentials Learn the essential knowledge required for ingesting and managing any variety of data sources in Splunk, regardless of its origin or scale. Consider this your “Deployment Server: 101” essentials crash-course. Tune in here > Optimizing Customer Experiences with Splunk's Digital Experience Monitoring Discover Splunk's approach to digital experience monitoring. Splunk experts discuss the different elements of Splunk's Digital Experience Monitoring (DEM) portfolio and how it can help you optimize your customer experience. Read the Blog >   Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance! Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET (Register here) Security: Risk-Based Alerting (RBA) - Wed, Nov 8  (Register here)  Security: SOAR - Wed, Nov 29  (Register here) Splunk Search - Wed, Dec 13  (Register here)   Splunk Lantern  This month’s Lantern blog highlights two sets of articles that illustrate how you can effectively use multiple parts of the Splunk product suite to solve some of your most crucial observability problems. These articles show the synergies between Splunk products and features, showcasing how they work together to enhance your outcomes beyond each product’s individual parts.  Education Corner Introducing Free eLearning for SOAR Administrators Developing Playbooks for Splunk Mission Control is targeted to help SOAR administrators gain the skills needed to harness the full potential of Splunk Mission Control. In this eLearning, SOAR playbook developers will learn how to use the SOAR Visual Playbook Editor (VPE) to create, test, and deploy playbooks for Mission Control. Admins will also learn how Mission Control and SOAR communicate, how playbooks operate within the Mission Control environment, and how to effectively utilize playbooks to interact with Mission Control incidents and response plans. This is your chance to take your SOAR expertise to “great new heights.”    Splunk Training Units Give You a Pass to Class At Splunk, we are committed to ensuring that our learning is accessible to everyone, everywhere. And, our customers understand the serious need for and value of a skilled workforce, which is why they add paid-for training into their Splunk software contracts. If you’re looking to take advantage of our eLearning with Labs or Instructor-led training courses, check in with your Customer Organization Manager who helps allocate training units (TUs) and tracks usage. Read our FAQ for more information about enrolling in STEP and accessing TUs for your courses. ... View more

    OCTOBER 2023      New Option to Get Your Data In - AWS PrivateLink Now Enabled for Observability Cloud We’ve enabled AWS PrivateLink for Splunk Observability Cloud. Now you can experience the AWS gold standard for securely sending your data directly to the Observability ingest endpoint from your AWS environment. Splunk Observability Cloud’s PrivateLink is enabled on ALL AWS realms and is limited to connectors in the same AWS region. Learn more.     More log integrations between Splunk Platform and Observability Cloud We’re making it easier for Observability Cloud users to seamlessly bring their log data into Splunk Cloud or Enterprise Platform. With our new “Open in Splunk platform” button available in Log Observer UI, engineers wishing to analyze their logs in more detail can easily transpile the logs from Observability Cloud to Splunk Cloud and take advantage of best-in-class logging capabilities. Log Observer Connect users will be able to swiftly jump from in-context troubleshooting to deep-dive log investigations in one unified platform. Learn more.     Latest Enhancement to Splunk App for Content Packs 2.0: Saved Searches Deactivated by Default Up until now, installing Splunk App for Content Packs on top of ITSI or IT Essentials Work would result in up to 300+ ‘saved searches’ being activated by default. This often led to ITSI performance issues and higher SVC compute for things customers did not use. To improve this experience and give users better control, in Splunk App for Content Packs 2.0 we’ve introduced a significant change in behavior where all the ‘saved searches’ are deactivated by default. Users can then enable only the saved searches they need. Learn more.     Splunk Observability Delivers Up to 243% ROI  Splunk commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study to examine the potential return on investment (ROI) enterprises can realize by deploying Splunk Observability. A decreased number of system outages, improved developer productivity, reduced MTTR, labor cost savings and enhanced employee experience are just some of the business benefits enabled by Splunk Observability.  Understand the Total Economic Impact of Your Splunk Observability Investment. Read the Splunk Observability Total Economic Impact Report™.     Unveiling the Complete Great Resilience Quest! We are excited to announce the release of the final two levels of the Great Resilience Quest! The Quest is an interactive experience that provides guidance and resources for real-world use cases at each stage of the resilience journey. Learn more about how you can use Splunk Observability Cloud to meet your key business needs. Join the quest and become eligible for grand prizes!        Platform Updates The Business Case for Unifying Security and Observability  As businesses and government organizations become more digital, more and more systems become mission-critical.  Given the potential business impact, executives and board members should accept these as business issues, ensuring system security and resilience must be addressed as part of business planning, risk management, and operations. Dive into the research from the Enterprise Strategy Group and Splunk to learn more. Introducing Federated Search for Amazon S3 for Splunk Cloud Platform, now GA Splunk is pleased to announce the general availability of Federated Search for Amazon S3, a new capability that allows you to search data from Amazon S3 buckets directly from Splunk Cloud Platform without the need to ingest it.  Enterprises Realize Benefits from Migrating to Cloud with Splunk Hear from other customers, leaders and practitioners who chose migrating to Splunk Cloud Platform as a better way to drive business value, efficiency and scale. Go beyond the buzz and start harnessing the power of ML and AI Learn about the different AL/ML features across Splunk and leverage the recommended apps and use cases. Check out the new AI and ML tab on the Essentials Board to kickstart your journey. IDC Report: Enterprises Report Benefits of Migrating to Splunk Cloud Platform As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus more on driving business value, efficiency and scale. Moving deployments to the cloud delivered as a software-as-a-service (SaaS) offers a win-win for current Splunk customers. In this analyst report, IDC examines the drivers and benefits that drove these enterprises to migrate deployments from on-premises to Splunk Cloud Platform delivered as a service. Customers documented for IDC the various business outcomes and benefits after migrating to the cloud and shared their journeys.     Tech Talks, Office Hours and Lantern Tech Talks OpenTelemetry: What’s Next. Logs, Profiles, and More  Tuesday, November 14 | 11AM PT / 2PM ET Register Starting with Observability: OpenTelemetry Best Practices Watch On-Demand Streamline Data Ingestion with Deployment Server Essentials Learn the essential knowledge required for ingesting and managing any variety of data sources in Splunk, regardless of its origin or scale. Consider this your “Deployment Server: 101” essentials crash-course. Tune in here > Optimizing Customer Experiences with Splunk's Digital Experience Monitoring Discover Splunk's approach to digital experience monitoring. Splunk experts discuss the different elements of Splunk's Digital Experience Monitoring (DEM) portfolio and how it can help you optimize your customer experience. Read the Blog >   Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance! Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET (Register here) Security: Risk-Based Alerting (RBA) - Wed, Nov 8  (Register here)  Security: SOAR - Wed, Nov 29  (Register here) Splunk Search - Wed, Dec 13  (Register here)   Splunk Lantern  This month’s Lantern blog highlights two sets of articles that illustrate how you can effectively use multiple parts of the Splunk product suite to solve some of your most crucial observability problems. These articles show the synergies between Splunk products and features, showcasing how they work together to enhance your outcomes beyond each product’s individual parts.    Education Corner More Visibility with Splunk O11y Education Courses  Maximize your organization’s O11y investment with new, free Splunk Education self-paced courses. Start with Optimizing Metrics Usage with Splunk Metrics Pipeline to learn how best to optimize your data intake into Splunk Observability Cloud using Splunk Metrics Pipeline Management. Move onto Introduction to Log Observer Connect to learn how to discover trends in log data and use the product for root cause analysis. Or, use those training units to take our instructor-led training, Using SignalFlow in Splunk Observability Cloud, which covers how to use the SignalFlow analytics language in Splunk Observability Cloud.   Splunk Training Units Are Your Ticket to Paid Training At Splunk, we are committed to ensuring that our learning is accessible to everyone, everywhere. And, our customers understand the serious need for and value of a skilled workforce, which is why they add paid-for training into their Splunk software contracts. If you’re looking to take advantage of our eLearning with Labs or Instructor-led training courses, check in with your Customer Organization Managers who help allocate training units (TUs) and track usage. Read our FAQ for more information about enrolling in STEP and accessing TUs for your courses.    Until Next Month, Happy Splunking ... View more

OCTOBER 2023  GovSummit 2023 Registration is now open for Splunk’s largest, free annual event for government and agency leaders and decision-makers. We’re looking forward to bringing together government IT and security professionals for industry-leading event.Hear firsthand from government and industry experts about how agencies are adapting and thriving — and building digital resilience to improve their cyber strategy. Event Details: Ronald Reagan Building and International Trade Center, Washington, D.C. Wednesday, December 14, 2023 | 7:30 am - 4:30 pm EST Workshops: Splunk offers free virtual workshops. Join the top technical experts at Splunk for hands-on learning on Splunk SOAR, Insider Threat, and Enterprise Security.  Times vary and there is no cost to attend.   11/2 Enterprise Security, 1:00 - 4:00 ET.  Registration Page 11/9 Investigating with Splunk, 1:00 - 5:00 ET, Registration Page 11/16 Security Lunch & Learn, 1:00 - 4:00 ET, Registration Page 11/30 Splunk 4 Rookies, 1:00 - 4:00 ET, Registration Page Booth and Table Top Events: Be sure to stop by and see Splunk to learn about the latest trends at these industry events: 11/2 FL IT Leadership Forum,Tallahassee, FL 11/9 Kubecon, Chicago, IL 11/7 TechNet IndoPac, Honolulu 11/13 AL Digital Govt Summit, Montgomery, AL 11/13  Alamo Ace, San Antonio, TX 11/15 NLC City Summit 2023, Atlanta, GA 11/16 CyberTalks, Washington, DC 11/27 AWS re:Invent, Las Vegas, NV New Content: M-21-31 mandate:  Software supply chain attacks are increasingly complex and damaging, underscoring the importance of increased government visibility throughout a cybersecurity incident. In this blog, Splunk discusses the M-21-31 mandate and how Splunk plays an integral part in protecting the nation's most critical assets.  A Guide to Embracing a Zero Trust Security Model in Government Ebook   Explore the directive pivot to a zero trust architecture, discover five key issues in the shift to hybrid/multi-cloud and why the DoD’s “never trust, always verify" mindset is critical to achieving cyber resiliency so they can become more informed and prepare for the next cyberattack.   Platform Updates   The Business Case for Unifying Security and Observability  As businesses and government organizations become more digital, more and more systems become mission-critical. Therefore, application performance and security incidents can have a direct impact on the top and bottom line, as an hour of system downtime can equate to the loss of thousands or even millions of dollars. Given the potential business impact, executives and board members should accept these as business issues, ensuring system security and resilience must be addressed as part of business planning, risk management, and operations. Dive into the research from the Enterprise Strategy Group and Splunk to learn more.    Enterprises Realize Benefits from Migrating to Cloud with Splunk Hear from other customers, leaders and practitioners who chose migrating to Splunk Cloud Platform as a better way to drive business value, efficiency and scale.   IDC Report: Enterprises Report Benefits of Migrating to Splunk Cloud Platform As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus more on driving business value, efficiency and scale. Moving deployments to the cloud delivered as a software-as-a-service (SaaS) offers a win-win for current Splunk customers. In this analyst report, IDC examines the drivers and benefits that drove these enterprises to migrate deployments from on-premises to Splunk Cloud Platform delivered as a service. Customers documented for IDC the various business outcomes and benefits after migrating to the cloud and shared their journeys. HSBC: Accelerated time to value and increased scalability by >300% Pacific Dental Services: Increased operational efficiencies by more than 40% GAF: Realized annual cost savings by 20%   Go beyond the buzz and start harnessing the power of ML and AI Learn about the different AL/ML features across Splunk and leverage the recommended apps and use cases. Check out the new AI and ML tab on the Essentials Board to kickstart your journey.   Tech Talks, Office Hours and Lantern Tech Talks Streamline Data Ingestion with Deployment Server Essentials Learn the essential knowledge required for ingesting and managing any variety of data sources in Splunk, regardless of its origin or scale. Consider this your “Deployment Server: 101” essentials crash-course. Tune in here > Optimizing Customer Experiences with Splunk's Digital Experience Monitoring Discover Splunk's approach to digital experience monitoring. Splunk experts discuss the different elements of Splunk's Digital Experience Monitoring (DEM) portfolio and how it can help you optimize your customer experience. Read the Blog > Community Office Hours Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance on all things Enterprise Security, RBA, SOAR, and Splunk Search! Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET (Register here) Security: Risk-Based Alerting (RBA) - Wed, Nov 8 at 1pm PT/4pm ET (Register here)  Security: SOAR - Wed, Nov 29 at 1pm PT/4pm ET (Register here) Splunk Search - Wed, Dec 13 at 1pm PT/4pm ET (Register here)   Splunk Lantern  This month’s Lantern blog highlights two sets of articles that illustrate how you can effectively use multiple parts of the Splunk product suite to solve some of your most crucial observability problems. These articles show the synergies between Splunk products and features, showcasing how they work together to enhance your outcomes beyond each product’s individual parts.  Education Corner New Course Alert! Troubleshooting Splunk Enterprise 9.1 Are you ready to tackle the mysteries of Splunk Enterprise 9.1? Then you’re ready for our latest course, Troubleshooting Splunk Enterprise 9.1. This 9-hour, paid instructor-led course designed for Splunk administrators covers topics and techniques for troubleshooting a standard Splunk distributed deployment using the tools available with Splunk Enterprise. This hands-on, lab-oriented class will help you gain troubleshooting experience before attending more advanced courses. Debug a distributed deployment today!   Free Splunk Training for University Students, Faculty, and IT Staff Bridging the growing cyber skills gap is critical to securing our digital world, which is why we continue to grow and scale our offerings within the Splunk Academic Alliance Program to better serve students, faculty, and staff within non-profit universities, colleges, and schools. Currently, we offer 21 free, self-paced courses with hands-on labs as part of our commitment to training the next generation of cyber experts. Find out more about the Splunk Academic Alliance Program, including a one-year, 10GB license for Splunk Enterprise and Foundational training all at no cost.     Until next month, Happy Splunking   ... View more

      September 2023  Splunk SOAR Version 6.1.1 is Now Available The latest version of Splunk SOAR launched on September 6th. Version 6.1.1 adds some new condition options to the Visual Playbook Editor and also provides users with the ability to convert classic playbooks into the current Visual Playbook Editor format through a new CLI conversion tool. Other updates include support for PostgreSQL version 15 for deployment and standalone, non-clustered environments can now run diagnostic commands and upload the resulting logs directly to Splunk Support. For more information, be sure to check out the latest release notes for the on-prem and cloud versions. Splunk Enterprise Security 7.2 is Now Available In our latest release of Splunk Enterprise Security 7.2, we introduce capabilities that deliver an improved workflow experience for simplified investigations; enhanced visibility and reduced manual workload; and customized investigation workflows for faster decision-making. You can find this version on Splunkbase! Release notes can be found here. Splunk User Behavior Analytics (UBA) 5.3 The latest release of Splunk User Behavior Analytics (UBA) 5.3 introduces three new models and 20 Node XL cluster for extraordinary scale and scope. Read the release blog to learn more about UBA 5.3 and the blog for detecting Lateral Movement Using Splunk User Behavior Analytics Splunk Threat Briefing: Newest Observed TTPs in the Wild  Watch the on demand recording of the Splunk Threat Research Team showcasing the entire exploitation sequence of the latest remote access trojans (RATs), destructive payloads and post-exploitation techniques. The team also highlights related security content developed to enhance your defenses. 2023 Gartner Market Guide for SOAR  If your team is looking to evaluate how security orchestration, automation and response (SOAR) can support and optimize your security operations, download a copy of the 2023 Gartner Market Guide for SOAR.  New blogs to help you make the most of Splunk Security  Key Threat Hunting Deliverables with PEAK Integrated Intelligence Enrichment with Threat Intelligence Management   That Was Easy! Manage Lookup Files and Backups with the Splunk App for Lookup File Editing   Security Content from the Splunk Threat Research Team The Splunk Threat Research Team has had four releases of security content in the last month, which provide 24 new detections, 27 updated detections and 8 new analytic stories. Read the Product News & Announcements post to learn more. Use Case Explorer See and read about our completely updated Use Case Explorer content on Splunk Lantern!  You can find prescriptive guidance from Splunk that will guide you on your digital resilience journey from foundational visibility to optimized experiences.     Platform Updates Flatten the SPL Learning Curve: Introducing Splunk AI Assistant for SPL Learn more about the preview of Splunk’s generative AI offering! Read this blog to discover how the Splunk AI Assistant uses an AI-powered chat experience to help new users quickly get up to speed with SPL and advanced users unlock more out of Splunk by providing query suggestions, explanations, and detailed breakdowns.   Fastest Time-to-Value Anomaly Detection in Splunk: The Splunk App for Anomaly Detection 1.1.0 Brand new to ML and looking for an easy way to get started? Check out the Splunk App for Anomaly Detection to help you find anomalies in your dataset in just a few clicks! You can unlock the power of ML in your everyday workflows, while also simplifying tasks that are historically complex and time consuming.  Looking for more AI and ML content? Check out the new AI and ML tab on the Essentials Board to kickstart your journey.   October 2023 Customer Advisory Boards Sign up and join our October 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.     Tech Talks, Office Hours and Lantern Tech Talks Security Edition | There's No Place Like Chrome...and the Splunk Platform! September 26 at 11 am PT Platform Edition |  Introduction to Splunk AI September 27 at 11 am PT   Security Webinar Build Scalable Security while Migrating to Cloud : Best Practices from Clayton Homes Wednesday, October 11, 11 am PT - 12 pm PT   Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance on all things OpenTelemetry, Risk-Based Alerting, and Enterprise Security. Limited Spots Available - Register Now! Observability: OpenTelemetry - Wed, Sep 27 at 1pm PT/4pm ET Security: Risk-Based Alerting (RBA) - Wed, Oct 11 at 1pm PT/4pm ET Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET   Splunk Lantern  Did You Know: Splunk Edge Processor common use cases Use Splunk Edge Processor to accelerate your pre-ingest data transformation capabilities! Let Splunk Lantern walk you step-by-step through two common use cases to help you get started: masking IP addresses and routing designated events to specific indexes.     Education Corner   Cybersecurity Education is a Hot Topic  If you’re in the U.S., you may have heard about the Biden administration’s National Cyber Workforce and Education Strategy announced on July 31, 2023. It’s kind of a big deal. One key objective is to address the shortage of cybersecurity professionals in the U.S., which leans heavily into enhancing cyber skills education. At Splunk, we've had our eyes on this for a while, which is why we continue to offer free cybersecurity and skills training – available and accessible anywhere, anytime. We have a curriculum of over 40 free self-paced courses – including our newest,  “The Cybersecurity Landscape” and “Security Operations and the Defense Analyst.” Plus, an entire catalog of self-paced training with labs and instructor-led courses.    Splunk Education Spans the Globe Have you ever wondered how you can access Splunk Education Training and Certification in your own region, in your own language, with local support? Well wonder no more! The Splunk Authorized Learning Partner (ALP) program is an extension of Splunk Education – offering you access to the quality of education you've come to expect from us. ALPs offer courses that dive into Cloud, Security, and Observability for administrators, architects, and users – in your language, timezone, and location. Find out more about our global learning partners today.      Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       Until next month, Happy Splunking   ... View more

  September 2023      Session Replay - Now In Splunk RUM Enterprise Edition! We are delighted to announce a significant enhancement to the Splunk Real User Monitoring (RUM) product: the general availability of Browser Session Replay. With Session Replay now at your fingertips, you can bid farewell to guesswork in troubleshooting user journey issues and experience a substantial reduction in the mean time to resolution (MTTR). Session Replay empowers you to witness firsthand what your users experience on your site, paving the way for optimized user experiences and enhanced performance.  Explore the RUM Product Tour to learn more!       Speed up Troubleshooting With The Latest Enhancements To Splunk APM AutoDetect Our new APM Detectors help engineering teams simplify alert creation and effectively detect abnormalities in traffic patterns. In one step, you can create detectors within the context of familiar capabilities like service map, tag spotlight, and APM’s landing page. Additionally, you can now create detectors based on request rate to understand abnormalities in traffic patterns. These innovations build on Splunk’s ability to use ML and AI to deliver more efficient alerting. From measuring sudden changes in your metric time series data with Autodetect for Infrastructure Monitoring, to detecting changes in service health and performance with APM, we’re arming you with the most accurate alerting, with even less manual effort.     ICYMI: Learn How Dynamic Dashboard Analytics Can Help You Simplify Troubleshooting Dynamic Dashboard Analytics makes it easier to troubleshoot issues using Splunk Observability Cloud dashboards. With a simple chart configuration, you can ensure that viewers of your dashboard will be able to find the source of problems faster. Read on.     New Entity Status RCA Remediation Capabilities In ITSI Have you ever wondered why your status in your infrastructure overview page shows “unstable” when you have entities linked? Now, you can identify the root cause and remediate through an in-product experience. With this new remediation capability in ITSI 4.17, you can gain visibility to why it’s marked “unstable” and troubleshoot the issues to ensure the status accurately reflects active or inactive based on its current state. With this new feature, we’ve also added:  new entity_status_tracking property in itsi_import_objects search command  new discovery search cleanup command | cleanupentitydiscovery  Learn more     Catch The State of Observability 2023 Webinar Replay Missed it live? Catch the replay! Hear from ESG’s senior analyst Jon Brown and Splunk’s Observability Practitioner Director Greg Leffler as they discuss what they see in the data from our latest State of Observability research survey and what they are hearing from observability practitioners like you. This session will also cover thematic findings related to cloud usage, hybrid application architectures, AIOps, and the convergence of various monitoring solutions.  Watch here.     Use Case Explorer See and read about our completely updated Use Case Explorer content on Splunk Lantern!  You can find prescriptive guidance from Splunk that will guide you on your digital resilience journey from foundational visibility to optimized experiences.     Platform Updates Flatten the SPL Learning Curve: Introducing Splunk AI Assistant for SPL Learn more about the preview of Splunk’s generative AI offering! Read this blog to discover how the Splunk AI Assistant uses an AI-powered chat experience to help new users quickly get up to speed with SPL and advanced users unlock more out of Splunk by providing query suggestions, explanations, and detailed breakdowns.   Fastest Time-to-Value Anomaly Detection in Splunk: The Splunk App for Anomaly Detection 1.1.0 Brand new to ML and looking for an easy way to get started? Check out the Splunk App for Anomaly Detection to help you find anomalies in your dataset in just a few clicks! You can unlock the power of ML in your everyday workflows, while also simplifying tasks that are historically complex and time consuming.  Looking for more AI and ML content? Check out the new AI and ML tab on the Essentials Board to kickstart your journey.   October 2023 Customer Advisory Boards Sign up and join our October 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.     Tech Talks, Office Hours and Lantern Tech Talks Observability Edition | From Clicks to Conversions: Tune Performance from the User Perspective. Now On-Demand Platform Edition |  Introduction to Splunk AI September 27 at 11 am PT     Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance on all things OpenTelemetry, Risk-Based Alerting, and Enterprise Security. Limited Spots Available - Register Now! Observability: OpenTelemetry - Wed, Sep 27 at 1pm PT/4pm ET Security: Risk-Based Alerting (RBA) - Wed, Oct 11 at 1pm PT/4pm ET Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET   Splunk Lantern  Did You Know: Splunk Edge Processor common use cases Use Splunk Edge Processor to accelerate your pre-ingest data transformation capabilities! Let Splunk Lantern walk you step-by-step through two common use cases to help you get started: masking IP addresses and routing designated events to specific indexes.     Education Corner O11y, O11y Oxen Free Today, we’re talking about free O11y education courses! Did you know that Observability is  abbreviated as O11y and is defined as the ability to measure the internal states of a system by examining its outputs? Organizations use observability tools to improve the performance of their distributed IT systems – solutions like the from Splunk designed to help organizations gain insight into and understanding of their applications and infrastructure. If you’re new to Splunk, find out how it works by taking our  free O11y training, including our newest courses:  Introduction to Log Observer Connect and Optimizing Metrics Usage with Splunk Metrics Pipeline Management.     Splunk Education Spans the Globe Have you ever wondered how you can access Splunk Education Training and Certification in your own region, in your own language, with local support? Well wonder no more! The Splunk Authorized Learning Partner (ALP) program is an extension of Splunk Education – offering you access to the quality of education you've come to expect from us. ALPs offer courses that dive into Cloud, Security, and Observability for administrators, architects, and users – in your language, timezone, and location. Find out more about our global learning partners today.      Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       Until next month, Happy Splunking ... View more

September 2023      Splunk Public Sector continues to support customers and partners at industry events and with education and training. Please stop by and see Splunk at any one of these Civilian, DoD, or State/Local and Educational events. Webinars: FedCiv Success with Splunk User Showcase | October 11, 1:00 - 3:30 ET We are hosting a FedCiv webinar featuring the same content and speakers from our May user program earlier this year! You will have the opportunity to hear directly from users in CMS, IRS, and State Dept who are using Splunk to solve for mission critical initiatives.   Public Sector Multi-Cloud Monitoring - Amazon Web Services On Demand Webinar  Are you looking for better visibility in your multi-cloud environment and want to see how Amazon Web Services (AWS) fits in? Do you need help identifying what needs to be monitored in your AWS cloud environments? Do you have sprawling AWS resources and billing costs you are trying to manage? Join us to hear from a Cloud Expert on all things AWS and Splunk!   Build Scalable Security while Migrating to Cloud : Best Practices from Clayton Homes Wednesday, October 11, 11 am PT - 12 pm PT Workshops: Splunk offers free workshops. Join the top technical experts at Splunk for hands-on learning on Splunk SOAR, Insider Threat, and Enterprise Security.  Times vary and there is no cost to attend. Date Workshop Time 5-Oct SOAR 1:00 - 5:00 ET 26-Oct Insider Threat 1:00 - 4:00 ET 2-Nov Enterprise Security 1:00 - 5:00 ET   Events: .conf Go 2023 | No cost to attend!  This fall Splunk is taking some of the best content from .conf23 on the road to Houston and Denver.  At .conf Go, you’ll explore how Splunk can help you overcome some of the toughest digital challenges, from responding faster to threats to pivoting quickly when the unexpected arises.  10/3 - Westin Galleria, Houston 10/18 - Grand Hyatt, Denver   Booth and Tabletop Events Be sure to stop by and see Splunk to learn about the latest trends at these industry events: 10/4 Colorado Digital Government Summit, Denver, CO 10/4 Oregon Cyber Resilience Summit, Eugene, OR 10/4 NYSLGITDA Fall Conference, New York, NY 10/8 NASCIO, Minneapolis, MN 10/9 Educause, Chicago, IL 10/12 CA Cybersecurity Education Summit, Sacramento, CA 10/14 IACP, San Diego, CA 10/16 Gartner IT Symposium Xpo, Orlando, FL 10/18 Louisiana Digital Government Summit, Baton Rouge, LA 10/22 BlackBaud BBCon, Denver, CO 10/23 Wisconsin Digital Government Summit, Green Bay, WI   Washington DC Splunk User Group: Attention Splunk Users! We are back with another live DC Splunk User Group meetup on October 24th! Join us at the Splunk office to learn about Splunk Connected Experiences. Food and drinks will be provided, and there may also be some cool swag.  Find out more and RSVP here.     Use Case Explorer See and read about our completely updated Use Case Explorer content on Splunk Lantern!  You can find prescriptive guidance from Splunk that will guide you on your digital resilience journey from foundational visibility to optimized experiences.     Platform Updates Flatten the SPL Learning Curve: Introducing Splunk AI Assistant for SPL Learn more about the preview of Splunk’s generative AI offering! Read this blog to discover how the Splunk AI Assistant uses an AI-powered chat experience to help new users quickly get up to speed with SPL and advanced users unlock more out of Splunk by providing query suggestions, explanations, and detailed breakdowns.   Fastest Time-to-Value Anomaly Detection in Splunk: The Splunk App for Anomaly Detection 1.1.0 Brand new to ML and looking for an easy way to get started? Check out the Splunk App for Anomaly Detection to help you find anomalies in your dataset in just a few clicks! You can unlock the power of ML in your everyday workflows, while also simplifying tasks that are historically complex and time consuming.  Looking for more AI and ML content? Check out the new AI and ML tab on the Essentials Board to kickstart your journey.   October 2023 Customer Advisory Boards Sign up and join our October 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.     Tech Talks, Office Hours and Lantern Tech Talks Observability Edition | From Clicks to Conversions: Tune Performance from the User Perspective.  Now On-Demand Platform Edition |  Introduction to Splunk AI September 27 at 11 am PT Security Edition | There's No Place Like Chrome...and the Splunk Platform! September 26 at 11 am PT Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions, where you can ask questions and get guidance on all things OpenTelemetry, Risk-Based Alerting, and Enterprise Security. Limited Spots Available - Register Now! Observability: OpenTelemetry - Wed, Sep 27 at 1pm PT/4pm ET Security: Risk-Based Alerting (RBA) - Wed, Oct 11 at 1pm PT/4pm ET Security: Enterprise Security - Wed, Oct 25 at 1pm PT/4pm ET   Splunk Lantern  Did You Know: Splunk Edge Processor common use cases Use Splunk Edge Processor to accelerate your pre-ingest data transformation capabilities! Let Splunk Lantern walk you step-by-step through two common use cases to help you get started: masking IP addresses and routing designated events to specific indexes.     Education Corner Cybersecurity Education is a Hot Topic  You may have already heard about the Biden administration’s National Cyber Workforce and Education Strategy announced on July 31, 2023. It’s kind of a big deal. One key objective is to address the shortage of cybersecurity professionals in the U.S., which leans heavily into enhancing cyber skills education. At Splunk, we've had our eyes on this for a while, which is why we continue to offer free cybersecurity and skills training – available and accessible anywhere, anytime. We have a curriculum of over 40 free self-paced courses – including our newest,  “The Cybersecurity Landscape” and “Security Operations and the Defense Analyst.” Plus, an entire catalog of self-paced training with labs and instructor-led courses.    Act Now to Preserve Your Splunk Certified Developer Status! Time is running out! Splunk Certified Developer Certification will be retired on September 30, 2023. If you aim to become a certified Splunk Developer and create cutting-edge apps using the Splunk web framework, don't delay. Begin your training with the Developer Track and study the exam guide. Current certification holders can maintain their badge until its expiration, but consider recertifying now to extend its validity for another three years.      Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       Until next month, Happy Splunking ... View more

August 2023      Public Sector Adoption Boards Splunk is constantly looking for ways to better support you on your journey to building better digital resilience. We recently launched three new microsites (aka adoption boards), highlighting the latest content, how-to’s, and use cases for Federal Civilian, Department of Defense, and SLED organizations to use on your Splunk journey.  Federal Civilian Agencies Department of Defense SLED Organizations Remember to bookmark these pages for future reference and look out for more content updates in the coming months! If you have any feedback or recommendations for this board, please be sure to give us your thoughts here.     See You in September Splunk Public Sector continues to support customers and partners at industry events and with education and training. Please stop by and see Splunk at any one of these Civilian, DoD, or State/Local and Educational events in September. Date Event Location Website 9/5-8 Billington Cybersecurity Summit Washington, DC Website 9/7 CT Digital Government Summit Hartford, CT Website 9/13 COVITS Richmond, VA Website 9/14 ME Digital Government Summit Augusta, ME Website 9/18-21 TribalNet San Diego, CA Website 9/20-21 National Cyber Summit Huntsville, AL Website 9/21 Potomac Officers Club Intel Summit Washington, DC Website 9/24-27 MISAC Rancho Mirage, CA Website   Zero Trust - More Important than Ever Splunk is teaming with several industry partners on Zero Trust solutions for Public Sector.   Look for more information on this collaboration soon and be sure to check out Splunk’s latest Zero Trust information in the eBook Essential Guide to Zero Trust and just-released Brief on How Splunk Supports the DoD Strategy.        September Virtual Workshops Did you know that over 2500 individuals participated in Splunk’s Virtual Public Sector Workshops in the past 6 months?  Be sure to check out September's classes that include Splunk 4 Rookies (Sept 7), IT Foundations (Sept 14), and RBA (Sept 28).  These ~3-hour workshops are led by Splunk SEs and are free to attend.      Splunk AI: Catalyzing Digital Resilience in Cybersecurity and Observability Artificial Intelligence (AI) has the potential to transform our industry. At Splunk, we see it as a catalyst for driving digital resilience — a way to accelerate human decision making in service of incident detection, investigation and response. Read this blog to learn more about Splunk’s AI strategy, vision, and newest capabilities.      An Introductory Use Case Guide: Splunk Artificial Intelligence for Observability Read “An Introductory Use Case Guide: Splunk Artificial Intelligence for Observability” to learn how organizations use anomaly detection, predictive analytics and clustering in Splunk to decrease downtime and foster innovation. This includes an introduction to AI and ML in observability, an overview of the Splunk AI/ML portfolio, and how to start your AI/ML project.     Tech Talks, Office Hours and Lantern   Tech Talks New Enhancements with Splunk Enterprise 9.1 Our latest product innovations support integrated workflows and improved user experiences. This makes it easier for you to detect and predict issues, find root cause, assess risk and impact radius, and remediate — quickly, accurately, at scale. Top 5 Summer Playlist! Immerse yourself in our top 5 technical deep dives and discover a world of knowledge this summer. Whether you’re a seasoned practitioner or an enthusiastic newcomer there’s plenty to choose from. Play Now   Admin Office Hours Office Hours - Getting Data In Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Getting Data In (GDI), where you can ask questions and get guidance on how to onboard your data sources, forwarder setup and troubleshooting, ingest actions, Edge Processor, and more! Limited Spots Available - Register Now! Getting Data In: Forwarders & Edge Processor - Wed, Aug 23 at 1pm PT/4pm ET Getting Data In: Platform (EMEA) - Wed, Sep 9 at 8am ET / 4pm UK time   Splunk Lantern - Read our latest blog update! This month we’re sharing all the new articles we’ve published over the past month, with lots of interesting new use cases, product tips, and data articles. We’re also asking for your vote in our Customer Choice Content Competition! Over the quarter we’ve been developing articles that meet direct asks from you, our customers, and now we want to hear which one is your favorite. Read on to find out more!     Education Corner Hot Cybersecurity Courses Added to the Splunk Free Training Catalog  It’s summertime in the Northern Hemisphere, which means it’s pretty hot everywhere. And the Splunk Education course curriculum is no exception! If you’re an aspiring Blue Team Academy defender, we’ve recently added two more free courses to our growing curriculum of over 40 free self-paced learning courses. Check out “The Cybersecurity Landscape” and “Security Operations and the Defense Analyst” courses now available and accessible anywhere, anytime.  Validate Your Splunk Certified Developer Skills Before It’s Too Late The Splunk Certified Developer Certification is being taken out of the rotation on September 30, 2023. So, if you want to become a Splunk Certified Developer and build some killer apps with the Splunk web framework, the clock is ticking. Get your training on by following the Developer Track and reviewing the exam study guide. If you currently hold the certification/badge, it will remain valid until its current expiration date – but you may want to consider recertifying before it’s gone to extend the validity of your certification for another three years.  Get a New Certification to Validate Your Cybersecurity Expertise Showcased at .conf23,  the Splunk Certified Cybersecurity Defense Analyst (CDA) certification exam is now open to the public in beta – for FREE. So, look over the study materials, take the exam, and show the world you're a Splunk Certified Cybersecurity Defense Analyst. We’ll give you a badge to prove it too!  Earn Summer-themed Splunk Swag with the Splunk Learning Rewards Program Are you making the most of your company's Splunk Education training units? If not, we've got an exciting program to incentivize you! Introducing the Splunk Learning Rewards Program.Earn points for each completed course, redeemable for awesome Splunk swag. Check out our limited-time Summer-themed rewards on the Learning Rewards site. Register and complete courses before your training units expire! Find out more here.  Meet Us in the Community| The Place to Learn and Share We love our Splunk Community members and we’re always looking for ways to make their experience even more fulfilling. This is why we recently expanded our online presence with the new Splunk Training and Certification Community Site! Here, you can connect with other like-minded curious members looking to share their knowledge and learn something new. It’s also a place where you can bring your passion and your point of view. Find out what’s new with Splunk Education – and all-things Training and Certification.      Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       Until next month, Happy Splunking ... View more

    August 2023  Introducing Splunk Attack Analyzer  Splunk is excited to introduce a new addition to the Splunk unified security operations experience: Splunk Attack Analyzer (formerly Twinwave), which automates threat analysis of suspected malware and credential phishing threats by identifying and extracting associated forensics to provide accurate and timely detections.   The Latest from SURGe  The SURGe security research team recently launched The Security Detail, a podcast that examines cyber threats across different industries. View episode information on this blog or listen on Apple Podcasts, Spotify or Podbean.  Bluenomicon: The Network Defender’s Compendium, a book of essays curated by the SURGe team, is now available digitally. Download your copy today.  Recordings of SURGe RSAC 2023 speaking sessions are now available: Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates Rethinking Recruiting: Effective Hiring Practices to Close the Skills Gap   Threat Informed Planning with Macro-level ATT&CK Trending   Splunk SOAR Playbook of the Month: Threat Hunting and Investigations For the latest series entries, the Splunk team showcases how playbooks can improve your approach to threat hunting and investigations. Check out the blog on Threat Hunting to learn how playbooks can help you automatically hunt for indicators of compromise, identify those threats in your environment, learn the details of the affected machine, and how to better explore the affected file system. Then read this month’s blog on Investigations to see how you can perform investigations at machine speed using Splunk SOAR and one of our investigation playbooks, Internal Host WinRM Investigate. Big News from OCSF The Open Cybersecurity Schema Framework (OCSF) is an open-source project established by Splunk, AWS and 16 other security and technology companies to remove security data silos and standardize data formats across security tools to help defenders rapidly detect and neutralize cyber threats. Learn more in this blog.  Splunk Enterprise and Splunk Cloud customers can readily ingest and analyze OCSF-formatted data from sources such as Amazon Security Lake or AWS AppFabric using the Splunk Add-On for AWS. Splunk Enterprise Security customers will also need the OCSF-CIM Add-On. Both the add-ons are available on Splunkbase at no extra charge.   Splunk AI: Catalyzing Digital Resilience in Cybersecurity and Observability Artificial Intelligence (AI) has the potential to transform our industry. At Splunk, we see it as a catalyst for driving digital resilience — a way to accelerate human decision making in service of incident detection, investigation and response. Read this blog to learn more about Splunk’s AI strategy, vision, and newest capabilities.  The SANS 2023 SOC Survey  Learn about the latest capabilities, architecture and technology of the modern security operations center (SOC) in the 2023 SANS SOC Survey report   New blogs to help you make the most of Splunk Security New PEAK Threat Hunting Framework blogs for turning hunts into detections and measuring hunting success Identifying BOD 23-02 Network Management Interfaces with Splunk UK TSA Regulations: SOC Teams, Get Ready!  DevSecOps is Here! Developers and SREs, Meet the SOC Team Security Content from the Splunk Threat Research Team  The Splunk Threat Research Team has had two releases of security content in the last month, which provide 8 new detections, 16 updated detections and 7 new analytic stories. Read the Product News & Announcements post to learn more and check out these blogs to help you stay ahead of threats:  Amadey Threat Analysis and Detections I am the Snake Now: Analysis of Snake Malware Machine Learning in Security: Detect DNS Data Exfiltration Using Deep Learning  Join The Great Resilience Quest! The quest for digital resilience has officially kicked off at .conf23! 400+ participants loved seeing the new path to greater resilience come to life at the Success Zone and played the virtual quest.  Missed .conf? Worry not as you too can join the virtual "The Great Resilience Quest" to explore new use cases and put your Splunk know-how to the test. This quest is welcoming adventurers throughout the year! Embark on this quest to learn how to implement Security + Observability use cases and get the right support from Splunk experts that make you ‘ready for anything’.  It’s never too late to join this adventure. Join the challenge, expand your horizons and win prizes! Play now! Tech Talks, Office Hours and Lantern   Tech Talks OCSF, Amazon Security Lake and Splunk Tuesday, August 29, 2023 | 10AM PT / 1PM ET Register to Attend A technical overview on Open Cybersecurity Schema Framework (OCSF), Amazon Security Lake, how they integrate with Splunk today and where things are heading.   Top 5 Summer Playlist! Immerse yourself in our top 5 technical deep dives and discover a world of knowledge this summer. Whether you’re a seasoned practitioner or an enthusiastic newcomer there’s plenty to choose from. Play Now   Admin Office Hours Office Hours - Getting Data In Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Getting Data In (GDI), where you can ask questions and get guidance on how to onboard your data sources, forwarder setup and troubleshooting, ingest actions, Edge Processor, and more! Limited Spots Available - Register Now! Getting Data In: Forwarders & Edge Processor - Wed, Aug 23 at 1pm PT/4pm ET Getting Data In: Platform (EMEA) - Wed, Sep 9 at 8am ET / 4pm UK time   Splunk Lantern - Read our latest blog update! This month we’re sharing all the new articles we’ve published over the past month, with lots of interesting new use cases, product tips, and data articles. We’re also asking for your vote in our Customer Choice Content Competition! Over the quarter we’ve been developing articles that meet direct asks from you, our customers, and now we want to hear which one is your favorite. Read on to find out more!   Education Corner Validate Your Splunk Certified Developer Skills Before It’s Too Late Hot Cybersecurity Courses Added to the Splunk Free Training Catalog  It’s summertime in the Northern Hemisphere, which means it’s pretty hot everywhere. And the Splunk Education course curriculum is no exception! If you’re an aspiring Blue Team Academy defender, we’ve recently added two more free courses to our growing curriculum of over 40 free self-paced learning courses. Check out “The Cybersecurity Landscape” and “Security Operations and the Defense Analyst” courses now available and accessible anywhere, anytime.    Get a New Certification to Validate Your Cybersecurity Expertise Showcased at .conf23,  the Splunk Certified Cybersecurity Defense Analyst (CDA) certification exam is now open to the public in beta – for FREE. So, look over the study materials, take the exam, and show the world you're a Splunk Certified Cybersecurity Defense Analyst. We’ll give you a badge to prove it too!  Until next month, Happy Splunking   ... View more

      August 2023      New in Splunk Observability Cloud: Enhancements to the Kubernetes Navigator Splunk delivers greater visibility, more intuitive exploration, and seamless troubleshooting for your Kubernetes components and containerized services with the recent updates to the Kubernetes navigator within Splunk Infrastructure Monitoring (IM). While you already had access to this Kubernetes monitoring solution out-of-the-box, the latest enhancements feature a more intuitive navigation, deeper visibility of your complete Kubernetes environment, and assisted troubleshooting.  Learn more       Experience Unified Identity between Observability Cloud and Splunk Platform You can now seamlessly access Splunk Cloud and Splunk Observability data with one same user identity! As you’re investigating an issue in Splunk Cloud Platform, you can maintain context and effortlessly navigate into Splunk Observability Cloud with our new single sign on feature. We’re also making it easy for Splunk admins to manage user data access by extending Splunk Cloud’s role-based access control in Splunk Observability Cloud, so that meeting internal compliance requirements is no longer a headache. For more info, take a look at our technical documentation here.     Splunk RUM Now Available in Australia  Splunk Real User Monitoring (RUM) officially expands regional availability to Australia. Splunk RUM is one of Splunk’s Digital Experience Monitoring (DEM) solutions that helps engineering teams proactively identify problems before customers notice and improve uptime and performance to deliver enhanced experiences that win customers.     ICYMI: Splunk Observability Cloud Named a Leader in the 2023 Gartner Magic Quadrant Splunk was named a Leader in the Gartner Magic Quadrant for Application Performance Monitoring and Observability this year. Download your complimentary copy of the report here to learn about key trends in APM and observability, and more!   Splunk AI: Catalyzing Digital Resilience in Cybersecurity and Observability Artificial Intelligence (AI) has the potential to transform our industry. At Splunk, we see it as a catalyst for driving digital resilience — a way to accelerate human decision making in service of incident detection, investigation and response. Read this blog to learn more about Splunk’s AI strategy, vision, and newest capabilities.      Federated Search for Amazon S3 webinar: View our on-demand webinar: “Federated Search: How to Seamlessly Search Your Data With Splunk & AWS" to learn more about this latest generally available feature that will open up new possibilities for searching your data. In partnership with the AWS team, we will discuss common use cases for log analytics on Amazon S3 using Splunk and AWS Glue.     An Introductory Use Case Guide: Splunk Artificial Intelligence for Observability Read “An Introductory Use Case Guide: Splunk Artificial Intelligence for Observability” to learn how organizations use anomaly detection, predictive analytics and clustering in Splunk to decrease downtime and foster innovation. This includes an introduction to AI and ML in observability, an overview of the Splunk AI/ML portfolio, and how to start your AI/ML project.     Join The Great Resilience Quest! The quest for digital resilience has officially kicked off at .conf23! 400+ participants loved seeing the new path to greater resilience come to life at the Success Zone and played the virtual quest.  Missed .conf? Worry not as you too can join the virtual "The Great Resilience Quest" to explore new use cases and put your Splunk know-how to the test. This quest is welcoming adventurers throughout the year! Embark on this quest to learn how to implement Security + Observability use cases and get the right support from Splunk experts that make you ‘ready for anything’.  It’s never too late to join this adventure. Join the challenge, expand your horizons and win prizes! Play now!     Tech Talks, Office Hours and Lantern   Tech Talks From Insights to Action: Modern Performance Metrics That Drive Exceptional User Experiences Tuesday, August 29, 2023 | 11AM PT / 2 PM ET  Register to Attend Learn how to gain end to end visibility into your end user’s experiences, optimize performance and uptime for your business critical applications. This session explores the key elements of Splunk’s Digital Experience Monitoring (DEM), including Real User Monitoring, Synthetic Monitoring, and Web Optimization. New Enhancements with Splunk Enterprise 9.1 Our latest product innovations support integrated workflows and improved user experiences. This makes it easier for you to detect and predict issues, find root cause, assess risk and impact radius, and remediate — quickly, accurately, at scale. Top 5 Summer Playlist! Immerse yourself in our top 5 technical deep dives and discover a world of knowledge this summer. Whether you’re a seasoned practitioner or an enthusiastic newcomer there’s plenty to choose from. Play Now   Admin Office Hours Office Hours - Getting Data In Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Getting Data In (GDI), where you can ask questions and get guidance on how to onboard your data sources, forwarder setup and troubleshooting, ingest actions, Edge Processor, and more! Limited Spots Available - Register Now! Getting Data In: Forwarders & Edge Processor - Wed, Aug 23 at 1pm PT/4pm ET Getting Data In: Platform (EMEA) - Wed, Sep 9 at 8am ET / 4pm UK time   Splunk Lantern - Read our latest blog update! This month we’re sharing all the new articles we’ve published over the past month, with lots of interesting new use cases, product tips, and data articles. We’re also asking for your vote in our Customer Choice Content Competition! Over the quarter we’ve been developing articles that meet direct asks from you, our customers, and now we want to hear which one is your favorite. Read on to find out more!       Education Corner Validate Your Splunk Certified Developer Skills Before It’s Too Late The Splunk Certified Developer Certification is being taken out of the rotation on September 30, 2023. So, if you want to become a Splunk Certified Developer and build some killer apps with the Splunk web framework, the clock is ticking. Get your training on by following the Developer Track and reviewing the exam study guide. If you currently hold the certification/badge, it will remain valid until its current expiration date – but you may want to consider recertifying before it’s gone to extend the validity of your certification for another three years.    Earn Summer-themed Splunk Swag with the Splunk Learning Rewards Program Are you making the most of your company's Splunk Education training units? If not, we've got an exciting program to incentivize you! Introducing the Splunk Learning Rewards Program.Earn points for each completed course, redeemable for awesome Splunk swag. Check out our limited-time Summer-themed rewards on the Learning Rewards site. Register and complete courses before your training units expire! Find out more here.    Meet Us in the Community| The Place to Learn and Share We love our Splunk Community members and we’re always looking for ways to make their experience even more fulfilling. This is why we recently expanded our online presence with the new Splunk Training and Certification Community Site! Here, you can connect with other like-minded curious members looking to share their knowledge and learn something new. It’s also a place where you can bring your passion and your point of view. Find out what’s new with Splunk Education – and all-things Training and Certification.      Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       Until next month, Happy Splunking ... View more

      June 2023      Synthetic Monitoring Wait Times & EU Regional Availability Splunk is announcing new capabilities to customize and test on end-user interactions! Synthetic Monitoring has expanded availability, and Wait Times within Splunk Synthetic Monitoring helps IT and engineering teams enhance the span of coverage for browser tests to achieve more accurate results.     End Of Support for SignalFx Smart Agent The deprecated SignalFx Smart Agent will reach End Of Support on June 30th, 2023. If you are still using the SignalFx Smart Agent, you should migrate to the Splunk Distribution of OpenTelemetry Collector. Here’s a dedicated runbook that covers a set of recommended steps such as collecting logs, viewing OOTB dashboards, and using the configuration translation tool to help with the migration.     Upcoming Planned Maintenance for Splunk APM & Splunk RUM There will be planned maintenance of the streaming infrastructure for Splunk APM and Splunk RUM in the coming weeks. The date and time of the planned maintenance activity depends on the realm that you use for Splunk APM and Splunk RUM. Additional details can be found here.     ICYMI The State of Observability 2023: Realizing ROI and Increasing Digital Resilience     Tech Talks, Office Hours, Community, Resources and Lantern   Observability Edition Tech Talks Available On-Demand Confidently Scale Your Observability Platform Without Scaling Costs | View Blog Part 2 - Diving Deeper with AIOps: Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence | Watch Now One Log To Rule Them All: Centralized Troubleshooting With Splunk Logs | View Blog   Admin Office Hours and Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, and more! Limited Spots Available - Register Now! Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET   Community Check out the new Community blog, where the Admin Configuration Service (ACS) team shares with you new training resources, recent ACS features, and the ACS Helper App.   Splunk Lantern It’s been a busy month for the Lantern team as we’ve been launching brand new types of articles on Lantern. We’ve got new Prescriptive Adoption Motions for Security to help you smoothly implement popular security use cases, plus a war story spotlighting how our partners work with Splunk to achieve best-in-class incident management. Check out our blog to find out about these and more.   Foundational Splunk Resources Are you fairly new to Splunk? Head over to the Splunk Essentials Adoption Board and get the deets on foundational Splunk resources that help you get started with Splunk Security and Observability solutions. Remember to bookmark this page for future reference and look out for more content updates in the coming months! And if you have any feedback or recommendations for this board, please be sure to give us your thoughts here.     Education Corner Level Up Your Certification Game at Splunk .conf23 in Vegas! Validate your mad skills with Splunk Certifications at .conf23. Splunk is rolling out its new Splunk Certified Cybersecurity Defense Analyst (CDA) exam and Splunk O11y Cloud Certified Metrics User Certification at .conf23 in Las Vegas, July 17-July 20. This is your exclusive opportunity to take the CDA for FREE and earn another coveted badge. You can also sit for the Cloud Certified Metrics exam, plus any other Splunk certification exam, on-site for the deeply-discounted price of just $25. Oh, and if you’ve been thinking about getting your Splunk Certified Developer Certification, this is your last chance to take the exam before it sunsets (AKA: is discontinued). Mark your calendars, fire up your laptops, and get ready for an unforgettable education extravaganza.   Splunk University is the New Summer School Las Vegas is the place for learning in July! If you are headed to .conf23, consider coming into Sin City early to attend one or more of over a dozen bootcamps, including two brand new courses on Mastering Your Data Essentials, and Blue Team Academy: Cybersecurity Defense Analyst Essentials. Our certified Splunk Education instructors will help you develop deeper expertise about using Splunk products to protect your organization. Splunk University will take place on July 15-17, and Thursday, July 20.   Bridging the Technical Skills Gap The buzz around the technical skills gap has been hard to miss lately as the world scrambles to reimagine a future of tech training and workforce diversity. And top business leaders worldwide are jumping into the conversation, actively seeking solutions to create a more diverse workforce that's better equipped to fill crucial cybersecurity roles. If you're eager to gain new perspectives about this hot topic, find out what Eric Fusilero, VP Global Enablement and Education at Splunk, and others shared during the DeVry University CEO Roundtable.You can read an overview in Eric’s latest blog, which also includes a complete recording of the discussion.     STEP Right Up to a New Learning Experience Calling all Splunk admins, architects, and users! On May 22, Splunk introduced a brand-new Splunk Learning Platform (STEP) – a new user interface where learners can access eLearning materials, in-person enrollments, completed training, and course completion certificates. Don't worry, the link you're familiar with (https://education.splunk.com) remains the same. But once you step into the revamped platform, get ready to embark on a more visual and engaging journey. Log in today, take a quick tour, and while you're at it, why not enroll in a course that piques your interest? The opportunities to expand your career potential are limitless with Splunk Education.       Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       We will be back in August! Until then, Happy Splunking ... View more

  June 2023  Security content from the Splunk Threat Research Team  There have been four releases of security content in the last month, which provide you with 73 new detections, 7 new analytic stories and 1 updated analytic story, which are all available via the Enterprise Security Content Update (ESCU) app and Splunk Security Essentials (SSE) app. Splunk also recently released v4.0 of Splunk Security Content. Learn more about the content development process and 4.0 release highlights in this blog.  Learn more about all the content developed by the Splunk Threat Research Team in the Q1 Roundup blog and corresponding Tech Talk.  New blogs to help you make the most of Splunk Security Haylee Mills is back with another great RBA blog, providing a deep dive into the four levels of the Splunk RBA Journey to plan for successful implementation. Following the introduction of the PEAK Threat Hunting Framework, the SURGe team now has deeper dive blogs for model-assisted threat hunts and hypothesis-driven hunts. Splunk field hashing and masking capabilities for compliance are now available with ingest actions and role-based field filtering (preview) features. Getting Started with SOAR in Mission Control  Splunk Mission Control integrates the security orchestration and automation features of Splunk SOAR (Cloud) to deliver a unified experience for threat detection, investigation, and response. Explore our demo to understand how you can build a SOAR playbook in Mission Control to automate your security actions at machine speed.  Watch the demo Security Partnerships Splunk, in consultation with SAP, has developed the Splunk® Security for SAP® solutions, an SAP Endorsed Application that allows security teams to leverage Splunk to monitor, identify and address threats impacting SAP environments. Click here to learn more about the benefit this app provides customers with SAP environments, and check out the demo video to see it in action. ·Splunk and Tenable have partnered to incorporate exposure management into the Splunk unified security operations experience so that vulnerability data can be immediately accessible and actionable for security analysts within Splunk. Read more about the integration here.   Amazon Security Lake — announced for public preview at AWS re:Invent in November of 2022 — is now generally available, and Splunk is excited to announce the general availability of the Splunk Add-On for AWS v7.0. Read our blog to learn how you can make the most of this partnership. .conf23 Session Catalog We are excited to share that our .conf23 Session Catalog is now available! Check out the wide array of engaging and informative Security sessions and workshops awaiting for you at .conf23. We invite you to “favorite” the sessions that spark your interest right away. After perusing and selecting your preferred sessions now, return in mid-June to construct your unique, personalized schedule. Read our round-up blog of Must-Attend EMEA Sessions at .conf23 from Matthias Maier. Let your Security learning journey at .conf23 begin! Tech Talks, Office Hours, Community, Resources and Lantern   Security Edition Tech Talk What’s New In Splunk SOAR Since the release of Splunk SOAR 6.0, the Splunk SOAR team has been hard at work implementing new features and integrations to help improve the SOAR user experience.The version 6.0 release represents a culmination of efforts to become part of the vision of a truly unified Splunk security experience and provides a single security operations solution with its integration with Mission Control. Join us as we take a look at the latest and greatest for Splunk SOAR 6.0 and 6.0.1.   Admin Office Hours and Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, and more! Limited Spots Available - Register Now! Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET   Community Check out the new Community blog, where the Admin Configuration Service (ACS) team shares with you new training resources, recent ACS features, and the ACS Helper App.   Splunk Lantern It’s been a busy month for the Lantern team as we’ve been launching brand new types of articles on Lantern. We’ve got new Prescriptive Adoption Motions for Security to help you smoothly implement popular security use cases, plus a war story spotlighting how our partners work with Splunk to achieve best-in-class incident management. Check out our blog to find out about these and more.   Foundational Splunk Resources Are you fairly new to Splunk? Head over to the Splunk Essentials Adoption Board and get the deets on foundational Splunk resources that help you get started with Splunk Security and Observability solutions. Remember to bookmark this page for future reference and look out for more content updates in the coming months! And if you have any feedback or recommendations for this board, please be sure to give us your thoughts here.     Education Corner Level Up Your Certification Game at Splunk .conf23 in Vegas! Validate your mad skills with Splunk Certifications at .conf23. Splunk is rolling out its new Splunk Certified Cybersecurity Defense Analyst (CDA) exam and Splunk O11y Cloud Certified Metrics User Certification at .conf23 in Las Vegas, July 17-July 20. This is your exclusive opportunity to take the CDA for FREE and earn another coveted badge. You can also sit for the Cloud Certified Metrics exam, plus any other Splunk certification exam, on-site for the deeply-discounted price of just $25. Oh, and if you’ve been thinking about getting your Splunk Certified Developer Certification, this is your last chance to take the exam before it sunsets (AKA: is discontinued). Mark your calendars, fire up your laptops, and get ready for an unforgettable education extravaganza.   Splunk University is the New Summer School Las Vegas is the place for learning in July! If you are headed to .conf23, consider coming into Sin City early to attend one or more of over a dozen bootcamps, including two brand new courses on Mastering Your Data Essentials, and Blue Team Academy: Cybersecurity Defense Analyst Essentials. Our certified Splunk Education instructors will help you develop deeper expertise about using Splunk products to protect your organization. Splunk University will take place on July 15-17, and Thursday, July 20.   Bridging the Technical Skills Gap The buzz around the technical skills gap has been hard to miss lately as the world scrambles to reimagine a future of tech training and workforce diversity. And top business leaders worldwide are jumping into the conversation, actively seeking solutions to create a more diverse workforce that's better equipped to fill crucial cybersecurity roles. If you're eager to gain new perspectives about this hot topic, find out what Eric Fusilero, VP Global Enablement and Education at Splunk, and others shared during the DeVry University CEO Roundtable.You can read an overview in Eric’s latest blog, which also includes a complete recording of the discussion.     STEP Right Up to a New Learning Experience Calling all Splunk admins, architects, and users! On May 22, Splunk introduced a brand-new Splunk Learning Platform (STEP) – a new user interface where learners can access eLearning materials, in-person enrollments, completed training, and course completion certificates. Don't worry, the link you're familiar with (https://education.splunk.com) remains the same. But once you step into the revamped platform, get ready to embark on a more visual and engaging journey. Log in today, take a quick tour, and while you're at it, why not enroll in a course that piques your interest? The opportunities to expand your career potential are limitless with Splunk Education.       Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       We will be back in August! Until then, Happy Splunking   ... View more

  June 2023      Splunk Enterprise Advisories On June 1, Splunk published Security Advisories regarding potential vulnerabilities related to Splunk Enterprise and Splunk Cloud Platform.  Please review our FAQ for answers to commonly asked questions for this month’s advisories. As always, customers are at the center of everything we do at Splunk and security is our top priority. We are committed to helping customers identify and remedy security issues quickly, and plan to provide advisories and patches for any vulnerability considered Critical or High Risk as close to real-time as possible.     What’s New in Splunk Cloud Platform 9.0.2303 Get more details on the updates in our newest cloud release. Read the highlights about our redesigned homepage, Dashboard Studio updates, Admin Config Service improvements, and so much more!     What’s new with Splunk Edge Processor Splunk Edge Processor - our latest innovation in data preprocessing and transformation at the edge - is now available in Sydney, rounding out its presence in the US (East and West) and Europe (Dublin).  Further, we’ve expanded Edge Processor sources and sinks to include HEC, providing greater access to third party data flows.      Migrating to Splunk Cloud Platform With Success: New Customer Testimonials Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating deployments to Splunk Cloud Platform as-a-service offering. This is evident from the collection of TechValidate research statistics and findings that surveyed Splunk customers who recently moved deployments to the Splunk Cloud Platform and immediately reaped the benefits of speed, scale and security. See it for yourself!      Now Available: Status page for Splunk Cloud Platform Are you looking for updates to widespread multi-customer outages in Splunk Cloud Platform? A new status page for Splunk Cloud Platform is now available to publish these updates across core business functionalities - Login, Ingest, Search and Index. This status page can be accessed by a simple search on the internet or by navigating to system status on the Splunk website.  If you would like to receive Email, Slack and Text notifications for these updates, Splunk Cloud Platform customers must subscribe to the status page. Customers will receive a confirmation notification upon subscription and will also be able unsubscribe via. this notification at any time. While it may be useful to subscribe with email distribution lists versus individual emails, please note that if a DL is added as a subscriber anyone in the DL can unsubscribe, effectively unsubscribing everyone else. The page published on May 15, 2023 will list widespread multi-customer outages from this day onwards. Customers will continue to receive notifications via other established mechanisms for all other customer specific outages in Splunk Cloud Platform. Subscribe Now!     Office Hours, Community, Resources and Lantern   Admin Office Hours and Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, and more! Limited Spots Available - Register Now! Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET   Community Check out the new Community blog, where the Admin Configuration Service (ACS) team shares with you new training resources, recent ACS features, and the ACS Helper App.   Splunk Lantern It’s been a busy month for the Lantern team as we’ve been launching brand new types of articles on Lantern. We’ve got new Prescriptive Adoption Motions for Security to help you smoothly implement popular security use cases, plus a war story spotlighting how our partners work with Splunk to achieve best-in-class incident management. Check out our blog to find out about these and more.   Foundational Splunk Resources Are you fairly new to Splunk? Head over to the Splunk Essentials Adoption Board and get the deets on foundational Splunk resources that help you get started with Splunk Security and Observability solutions. Remember to bookmark this page for future reference and look out for more content updates in the coming months! And if you have any feedback or recommendations for this board, please be sure to give us your thoughts here.     Education Corner Level Up Your Certification Game at Splunk .conf23 in Vegas! Validate your mad skills with Splunk Certifications at .conf23. Splunk is rolling out its new Splunk Certified Cybersecurity Defense Analyst (CDA) exam and Splunk O11y Cloud Certified Metrics User Certification at .conf23 in Las Vegas, July 17-July 20. This is your exclusive opportunity to take the CDA for FREE and earn another coveted badge. You can also sit for the Cloud Certified Metrics exam, plus any other Splunk certification exam, on-site for the deeply-discounted price of just $25. Oh, and if you’ve been thinking about getting your Splunk Certified Developer Certification, this is your last chance to take the exam before it sunsets (AKA: is discontinued). Mark your calendars, fire up your laptops, and get ready for an unforgettable education extravaganza.   Splunk University is the New Summer School Las Vegas is the place for learning in July! If you are headed to .conf23, consider coming into Sin City early to attend one or more of over a dozen bootcamps, including two brand new courses on Mastering Your Data Essentials, and Blue Team Academy: Cybersecurity Defense Analyst Essentials. Our certified Splunk Education instructors will help you develop deeper expertise about using Splunk products to protect your organization. Splunk University will take place on July 15-17, and Thursday, July 20.   Bridging the Technical Skills Gap The buzz around the technical skills gap has been hard to miss lately as the world scrambles to reimagine a future of tech training and workforce diversity. And top business leaders worldwide are jumping into the conversation, actively seeking solutions to create a more diverse workforce that's better equipped to fill crucial cybersecurity roles. If you're eager to gain new perspectives about this hot topic, find out what Eric Fusilero, VP Global Enablement and Education at Splunk, and others shared during the DeVry University CEO Roundtable.You can read an overview in Eric’s latest blog, which also includes a complete recording of the discussion.     STEP Right Up to a New Learning Experience Calling all Splunk admins, architects, and users! On May 22, Splunk introduced a brand-new Splunk Learning Platform (STEP) – a new user interface where learners can access eLearning materials, in-person enrollments, completed training, and course completion certificates. Don't worry, the link you're familiar with (https://education.splunk.com) remains the same. But once you step into the revamped platform, get ready to embark on a more visual and engaging journey. Log in today, take a quick tour, and while you're at it, why not enroll in a course that piques your interest? The opportunities to expand your career potential are limitless with Splunk Education.       Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       We will be back in August! Until then, Happy Splunking ... View more

June 2023      StateRAMP Authorization! Splunk has received approval for Splunk Cloud for StateRAMP Authorization. Splunk Cloud is now listed on the StateRAMP Authorized Product List. Splunk continues its commitment to state and local government and higher education by achieving an 'Authorized' designation from the State Risk and Authorization Management Program (StateRAMP®). Want to learn more?  Check out this fantastic blog by Mary Lou Prevost.     Events Visit with Splunk Public Sector at .conf23 Coming to .conf23 on July 17-20 in Las Vegas?  Be sure and stop by one of the many Public Sector focused sessions.  A Public Sector reception is also occurring on July 18th from 6:00-8:00 at Chica Restaurant in the Venetian Hotel.    Public Sector Webinar Series Looking for ways  on how to monitor multi-cloud environments with Splunk?  Check out the upcoming PBST webinar series  that is led by our SE and CSE team! Multi-Cloud Hands-On Workshop:  June 27, 1 PM ET: Register here Multi-Cloud Webinar w/Azure: July 11, 1 PM ET:  Register here SOAR, Hands-On workshop: July 13, 1 PM ET: Register here Security, For anyone new to Splunk Workshop: July 27, 1 PM ET: Register here     State of Observability 2023 The State of Observability 2023 is officially here! The report outlines the biggest observability challenges, as well as the brightest opportunities, for organizations in all industries and at various stages of their own observability maturity journey.      Tech Talks, Office Hours, Community, Resources and Lantern   Tech Talks Splunk Security Content for Threat Detection & Response, Q1 Roundup with Principal Threat Researcher, Michael Haag   Admin Office Hours and Community Office Hours Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour session for Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, and more! Limited Spots Available - Register Now! Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET   Community Check out the new Community blog, where the Admin Configuration Service (ACS) team shares with you new training resources, recent ACS features, and the ACS Helper App.   Splunk Lantern It’s been a busy month for the Lantern team as we’ve been launching brand new types of articles on Lantern. We’ve got new Prescriptive Adoption Motions for Security to help you smoothly implement popular security use cases, plus a war story spotlighting how our partners work with Splunk to achieve best-in-class incident management. Check out our blog to find out about these and more.   Foundational Splunk Resources Are you fairly new to Splunk? Head over to the Splunk Essentials Adoption Board and get the deets on foundational Splunk resources that help you get started with Splunk Security and Observability solutions. Remember to bookmark this page for future reference and look out for more content updates in the coming months! And if you have any feedback or recommendations for this board, please be sure to give us your thoughts here.     Education Corner Level Up Your Certification Game at Splunk .conf23 in Vegas! Validate your mad skills with Splunk Certifications at .conf23. Splunk is rolling out its new Splunk Certified Cybersecurity Defense Analyst (CDA) exam and Splunk O11y Cloud Certified Metrics User Certification at .conf23 in Las Vegas, July 17-July 20. This is your exclusive opportunity to take the CDA for FREE and earn another coveted badge. You can also sit for the Cloud Certified Metrics exam, plus any other Splunk certification exam, on-site for the deeply-discounted price of just $25. Oh, and if you’ve been thinking about getting your Splunk Certified Developer Certification, this is your last chance to take the exam before it sunsets (AKA: is discontinued). Mark your calendars, fire up your laptops, and get ready for an unforgettable education extravaganza.   Splunk University is the New Summer School Las Vegas is the place for learning in July! If you are headed to .conf23, consider coming into Sin City early to attend one or more of over a dozen bootcamps, including two brand new courses on Mastering Your Data Essentials, and Blue Team Academy: Cybersecurity Defense Analyst Essentials. Our certified Splunk Education instructors will help you develop deeper expertise about using Splunk products to protect your organization. Splunk University will take place on July 15-17, and Thursday, July 20.   Bridging the Technical Skills Gap The buzz around the technical skills gap has been hard to miss lately as the world scrambles to reimagine a future of tech training and workforce diversity. And top business leaders worldwide are jumping into the conversation, actively seeking solutions to create a more diverse workforce that's better equipped to fill crucial cybersecurity roles. If you're eager to gain new perspectives about this hot topic, find out what Eric Fusilero, VP Global Enablement and Education at Splunk, and others shared during the DeVry University CEO Roundtable.You can read an overview in Eric’s latest blog, which also includes a complete recording of the discussion.     STEP Right Up to a New Learning Experience Calling all Splunk admins, architects, and users! On May 22, Splunk introduced a brand-new Splunk Learning Platform (STEP) – a new user interface where learners can access eLearning materials, in-person enrollments, completed training, and course completion certificates. Don't worry, the link you're familiar with (https://education.splunk.com) remains the same. But once you step into the revamped platform, get ready to embark on a more visual and engaging journey. Log in today, take a quick tour, and while you're at it, why not enroll in a course that piques your interest? The opportunities to expand your career potential are limitless with Splunk Education.       Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!       We will be back in August! Until then, Happy Splunking ... View more

  May 2023  Level Up Your Cybersecurity with Risk-Based Alerting Have you taken advantage of Risk-Based Alerting to reduce alert volume, gain higher fidelity alerts and get more context for analysis? Haylee Mills, Splunk Security Strategist, is here to help you get started on your RBA journey with an on-demand webinar RBA: The Future and Foundation of Next Generation Security and RBA blog series: RBA: The New Frontier for SIEM Level Up Your Cybersecurity with RBA Planning for Success with RBA Splunk SOAR Playbook of the Month: Identifier Reputation Analysis In the first entry of our new monthly series, the Splunk SOAR team is excited to share a more detailed look at the first playbook in our recent Enrichment Response Pack. Check out our blog on Identifier Reputation Analysis to see how your team can implement a workflow that will help them automate the alert and quarantine process for potential threats based on key identifier values. Machine Learning in Security  The Splunk Machine Learning for Security team has two tech talks now available to view on-demand. The Elevate Your DGA Detection Game tech talk highlights the recently developed DGA Deep Learning pre-trained model that can be deployed in Splunk to identify DGA threats. The Suspiciously Named Processes tech talk showcases how Splunk uses Deep Learning to detect suspiciously named processes and how to deploy the detection using the Splunk App for Data Science and Deep Learning.  The team also recently developed a new detection now available in Enterprise Security Content Update app that uses a pre-trained deep learning model to look for signs of DNS Tunneling using TXT payloads. Learn more about the detection in this blog. Model your response plans based on pre-built templates in Splunk Mission Control To help you unify your security operations, Splunk Mission Control includes a Response Templates feature to optimize case management efficiency and help standardize your team’s operational processes. Check out the video demo of response templates to learn more about how they can help your team streamline your workflows. Introducing the PEAK Threat Hunting Framework  The SURGe security research team has developed a new threat hunting framework to help you drive improvement in automated detection and stay ahead of attackers. The PEAK framework incorporates three types of hunts: hypothesis-driven, baseline, and model-assisted. Learn more about each and PEAK framework highlights in our introductory blog. New Security Content from the Splunk Threat Research Team  The Splunk Threat Research Team has had three releases of security content in the last month, which provide you with 21 new detections and 4 new analytic stories. Read our Product News & Announcements post to learn more.  The team has also published the following blogs to help you stay ahead of threats:  Threat Update: AwfulShred Script Wiper  These are the Drivers You are Looking For: Detect and prevent malicious drivers  Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise  Detecting Threats with Splunk Security Content - Q4 Roundup and corresponding Tech Talk  Talking Unified SecOps with Special Guest Allie Mellon  Forrester SecOps Analyst Allie Mellen joins Splunk for a conversation about SecOps market dynamics, how Splunk is unifying, simplifying and modernizing SecOps, and some SOC predictions. View the recording here.  Splunk Gets the Hat Trick  Splunk is proud to be recognized as a Leader in SIEM by three analyst firms. Learn more about each report’s findings in our blog, and download your own copy of each today.  Webinars  Splunking for Outcomes: Kicking Off Your RBA Journey  This 30-minute, success-oriented webinar features Splunk's Ted Skinner, as he shares best practices, considerations, and learnings around RBA implementation.  View this on-demand webinar if you are looking to implement RBA.    Scalable Security with Migration to Splunk Cloud Platform : Lessons Learned from Clayton Homes June 15 | 10 am PT Join Splunk’s own Olivia Henderson as she discusses best practices and lessons learned with Leonard Wall, Director of Information Security at Clayton Homes. Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!    Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more. Until Next Month, Happy Splunking   ... View more

    May 2023      Supercharge your value realization with Splunk Cloud Platform Accelerate your cloud adoption with migration to Splunk Cloud Platform and immediately enjoy the benefits of speed, scale, and security. Splunk platform capabilities delivered as a service — enables you to make confident decisions and take decisive action on insights from your data without needing to purchase, manage or deploy infrastructure. Watch this video to learn more.      Operationalizing Your Machine Learning Solutions The past few years have seen organizations have to cope with disruption on a global scale, with business resilience being tested like never before. As noted in our Digital Resilience Pays Off report, being able to prepare for change was a key factor in building resilience to thrive through uncertain times. One subject that is often close to change and innovation is Machine Learning (ML). With estimates suggesting that 87% of data science projects fail to make it to production, however, how can you successfully leverage innovative technologies? Join us to learn about how Splunk is approaching data science and machine learning to help you harness the power of your data. During this session, we discuss: How use of AI and ML can increase your insights, efficiency and ultimately resilience Some of the key challenges operationalizing ML in production systems How to use new features in the Machine Learning Toolkit (MLTK) to deploy pre-trained models in Splunk How MLTK and the Splu     Platform Edition Tech Talks and Office Hours Tech Talks: View Now! The Splunk Success Framework: Your Guide To Successful Splunk Implementations If you’re responsible for creating, maintaining or scaling your Splunk implementation, don’t miss this on-demand Tech Talk on the refreshed and revised Splunk Success Framework (SSF). Led by Ryan Smalley, Customer Success Core Products SME, this session will provide guidance on how to get started with the Splunk Success Framework and how it can benefit your organization. Introducing Edge Processor See how Splunk’s latest innovation in data processing can support use cases in your environment. Admin Your Splunk Cloud, Your Way Learn how to optimize your Splunk deployment and streamline common admin tasks with Admin Config Service (ACS).   Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET     Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.   Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more. Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or  some other type of research invitation. We look forward to hearing from you!    Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.     .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

    May 2023      Observability Cloud End Of Support for SignalFx Smart Agent The deprecated SignalFx Smart Agent will reach End Of Support on June 30th, 2023. If you are still using the SignalFx Smart Agent, you should migrate to the Splunk Distribution of OpenTelemetry Collector. Here’s a dedicated runbook that covers a set of recommended steps such as collecting logs, viewing OOTB dashboards, and using the configuration translation tool to help with the migration. OpenTelemetry Insights Starting in the first week of June, the new OpenTelemetry Insights page will be available    for all customers. With the first release, this page will provide visibility into the OpenTelemetry Collector agents that you have deployed, which AWS EC2 hosts they are attached to along with the hosts that are not instrumented with the agent. You can easily plan and track your deployments based on the host and agent specific metadata.   Subscription usage billing cycle to switch to calendar month Starting July 1, we are introducing changes to standardize the measurement time period used to calculate subscription usage across all Observability products. Instead of using the current “Billing” Month, which is different for each customer and product, we will standardize to a calendar month cycle measurement period.  All usage measurements by product will remain unchanged, but each month’s start date will become the 1st of the month, ending on the last calendar day of the month. This will bring consistency across all Splunk products, and make usage measurements much simpler and more intuitive.    Note: There is no billing or financial impact to customers but some customers may encounter missing usage near the end of June’s monthly cycle. For example: If a customer's billing end-date is June 20th then the data in the monthly usage report from June 21st to June 30th will be missing. For any questions, feel free to open a support ticket.      Synthetics Synthetic Monitoring Wait Times & regional availability in EU Splunk is announcing new capabilities to customize and test on end-user interactions! Synthetic Monitoring has expanded availability, and Wait Times within Splunk Synthetic Monitoring helps IT and engineering teams enhance the span of coverage for browser tests to achieve more accurate results.     ICYMI It Takes a Village – And Some New Features From Splunk – To Scale Your Cloud Monitoring Without Breaking the Bank New APM Capabilities Help Optimize Application Performance Across Monoliths or Microservices Splunk Synthetics in Observability Terraform Provider Released Bring Order to On-call Chaos With Splunk Incident Intelligence New Splunk Observability Innovations Deliver Accelerated Troubleshooting for Engineering Teams     Splunk Lantern New product tip available in Lantern!  Review the Summarizing high-cardinality metrics by using metrics pipeline management article.  Review for expert guidance on monitoring observability ingest usage for your team.   Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more.     Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.   Talk with us about Splunk!  The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!    Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.   .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

May 2023      Splunk Scored a Hat Trick as Leader in SIEM!  Splunk is recognized as a Leader in SIEM by three analyst reports: Forrester Wave™ Q4 2022, the Gartner® Magic Quadrant™ for Security Information and Event Management, and the 2022 IDC MarketScape. To top it off, we are the ONLY vendor in the market to receive this recognition from all three analyst firms! Read the blog post Events Gartner Risk Summit: June 5-7 Splunk is a Platinum sponsor at the Gartner Security & Risk Summit being held at Gaylord Convention Center in National Harbor, MD.   Be sure to stop by Splunk’s booth or visit our session: Improve Digital Resilience through Unified Security Operations Tuesday, June 5 2023 @ 2:35PM.     AWS Public Sector: June 7-8 Splunk is a Silver sponsor at AWS Summit (DC) 2023 at the Walter E. Washington Convention Center.  This event is free to attend and includes sessions with Splunk and our partners.  Save the date and be sure to stop by Splunk’s booth #117.   Agenda & FAQ Register Here (free)   We Have Liftoff: June 22 Splunk’s inaugural “Launch n’ Learn” is taking place at the Kennedy Space Center on June 22nd in Cape Canaveral, Florida. This full day (free) event will explore how Aerospace & Defense agencies and their partners utilize Splunk’s machine data platform to solve complex problems and is co-sponsored by AWS, August Schell, and Carahsoft.  Space is limited  so register today. Register Today   In addition, read our new solution brief Splunk for Aerospace and Defense and visit our Website. Tech Talks and Office Hours Tech Talks: View Now! One Log To Rule Them All:  Centralized Troubleshooting with Logs Learn how you can centralize your log management across ITOps and engineering use cases. Logs are truly powerful. When combined with metrics and traces, they can give you key insights into why, what, and where the problem lies. They are fundamental for hybrid troubleshooting and monitoring, making them a critical component of the ITOps practitioner and engineer’s toolkit.  Watch the <2min trailer and register: Here The Splunk Success Framework: Your Guide To Successful Splunk Implementations If you’re responsible for creating, maintaining or scaling your Splunk implementation, don’t miss this on-demand Tech Talk on the refreshed and revised Splunk Success Framework (SSF). Led by Ryan Smalley, Customer Success Core Products SME, this session will provide guidance on how to get started with the Splunk Success Framework and how it can benefit your organization. Introducing Edge Processor See how Splunk’s latest innovation in data processing can support use cases in your environment. Admin Your Splunk Cloud, Your Way Learn how to optimize your Splunk deployment and streamline common admin tasks with Admin Config Service (ACS).   Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.     Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more.   Talk with us about Splunk!  The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!      Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.     .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

At Splunk, we are continuously working to enhance the security of Splunk Enterprise and Splunk Cloud Platform. As part of that effort, we have been working towards deprecating jQuery libraries older than v3.5 since the release of Splunk Enterprise v9.0 and Splunk Cloud Platform v8.2.2105 in early 2021. We intend to continue the deprecation process of older jQuery library usage for security purposes.  Your ACTION IS REQUIRED to prepare for the removal of pre-v3.5 jQuery libraries. For details on how to upgrade them in your Splunk instance, refer to Upgrade Your Splunk Instance to jQuery 3.5 in Three Simple Steps. Please see notes below for updates specific to your deployment type. For Splunk Enterprise Admins: Starting with the Splunk Enterprise v9.1, with an expected release sometime in June-August of 2023, usage of older jQuery libraries will be restricted by default. However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”. For Splunk Cloud Admins: Starting with the release of Splunk Cloud Platform v9.0.2208, use of older jQuery libraries is restricted by default.  However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”. We plan to remove the ability to use such libraries starting v9.0.2305 of Splunk Cloud Platform targeted for June-August 2023 timeframe. ... View more

  April 2023 | Check out the latest and greatest Unify Your SecOps with Splunk Mission Control: Watch the Webinar The convergence of SIEM and SOAR technologies simplifies and modernizes investigations by integrating detections, response templates, and automation. Watch this webinar to learn how Splunk Mission Control strengthens your digital resilience by bringing order to your security operations' chaos and allows you to simplify your security workflows. New Detections from the Splunk Threat Research Team  The Splunk Threat Research Team (STRT) has had two releases of security content in the last month, which provide you with 34 new detections and 4 new analytic stories. The new security content is available via the ESCU application update process or via Splunk Security Essentials (SSE).   Content release highlights include:  Detections related to CVE-2023-23397, a critical elevation of privilege (EoP) vulnerability affecting Microsoft Outlook for Windows A proof-of-concept for CVE-2023-21716, a critical vulnerability in Microsoft Word that allows remote code execution utilizing a heap corruption in rich text files Detections related to Okta IM2 logs for detecting suspicious authentication-based security attacks  Identifying the use of Silver, an OSS cross-platform adversary emulation/red team framework produced by BishopFox, that has gained more traction with adversaries as it is often seen as an alternative to Cobalt Strike The Splunk Threat Research Team has also published the following blogs to help you stay ahead of threats:  AsyncRAT Crusade: Detections and Defense Breaking the Chain: Defending Against Certificate Services Abuse   Threat Advisory: SwiftSlicer Wiper STRT-TA03 Machine Learning in Security: Detecting Suspicious Processes Using Recurrent Neural Networks Join Splunk at RSA Conference 2023  Splunk is excited to be joining the cybersecurity community back at the Moscone Center in April for RSAC. Stop by booth 5770 in the north expo to pick up a copy of the brand new book we’ll be releasing at the event, Bluenomicon: The Network Defender’s Compendium, and pick up some Splunk goodies. Learn more about Splunk at RSAC and sign up for a 15 minute conversation with a subject matter expert in the booth here. My Username Fields Have Passwords in Them! What Do I Do? Learn about the risks of password disclosure in authentication logs and how to use Security Orchestration Automation and Response (SOAR) to address this risk in near-real time in our recent blog. .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. You’ll learn from your peers who are addressing real-world security challenges, and we’ll cover a wide range of contemporary security topics from compliance to detection and response. Visit conf.splunk.com for more information. Overcome Cybersecurity Challenges to Improve Digital Resilience  At Splunk we strive to help customers overcome common security challenges associated with people, processes and technology. Read more to learn how automation, unified security operations, and tackling security as a data problem can help solve key cybersecurity challenges to improve digital resilience.  EDUCATION CORNER Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!  15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! Tech Talks: Security Edition Machine Learning in Security: Elevate Your DGA Detection Game Tuesday, May 2nd  | Register Now Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation. Until Next Month, Happy Splunking ... View more

  April 2023 | Check out the latest and greatest Communicating Data Stories to Executives: Top 5 Best Practices for Dashboard Design  How can you make sure any viewer of your dashboards can go “I understand what’s going on and exactly what I need to do/consider now”? Read this guide to discover best practices for ensuring your dashboards are informative and effective for any audience. Building Digital Resilience for SecOps, ITOps, and DevOps Bad things are bound to happen — cybersecurity threats, IT system stressors, and adverse events. In the face of these incidents, organizations must keep their systems secure and reliable. They need the ability to quickly and comprehensively detect, investigate and respond; pivot quickly when the macro-environment demands it; and ultimately learn from the experience to better and more efficiently respond to similar events in the future. They need to be resilient. Luckily for you, Splunk continues to release enhancements for a unified security and observability platform to build the digital resilience needed for our modern technological landscape. Operationalizing Your Machine Learning Solutions: Strategies for Success Implementing machine learning is key for fostering innovation. However, with estimates suggesting that 87% of data science projects fail to make it to production, how can you successfully leverage innovative technologies? Register for this webinar to learn how you can implement AI and ML to increase your insights, understand key challenges operationalizing ML in production systems, and use new features in the Machine Learning Toolkit (MLTK) to deploy pre-trained models in Splunk. Predictions: a Deeper Dive into the Rise of the Machines The impact of AI and automation on the retail industry should not be underestimated. The compound effects of improvements in technology and labor shortages have created an ideal scenario for innovation. In this blog, we will take a deeper look into some of the AI and automation use cases that we have seen in retail and outline some of the areas of focus to help you get started. A Cloud Strategy Conversation with Splunk Use Splunk Cloud Platform to search, analyze, visualize and act on your data with a flexible and cost-effective data platform as-a-service. This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! .conf23 Registration is Open This year’s event will be taking place July 17-20, 2023, at The Venetian Resort Las Vegas. Splunk University will be offered July 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Join fellow experts in Security, IT and DevOps at .conf23 to learn, network and grow. Visit conf.splunk.com for more information. Share your thoughts on Observability and the Splunk Platform! The Splunk product design team wants to learn about how you use Splunk Enterprise & Splunk Cloud together with Splunk Observability Cloud. If you’re interested in spending an hour with us chatting 1:1 over Zoom, please fill out this quick questionnaire so we can reach out to you. Users of Splunk Cloud, Splunk Observability Cloud, and security products are all welcome. Any individual who completes the hour long 1:1 Zoom can receive a $100 USD Amazon gift card or choose to apply those funds to a charitable donation. Education Corner Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!    15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo   Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation. Until Next Month, Happy Splunking   ... View more

  April 2023 | Check out the latest and greatest Log Timeline in Observability now available! Get to the root cause faster by adding logs-based time charts in your Splunk Observability Cloud dashboards. Quickly visualize trends from log data like log volume or analysis of field values over time in a point-and-click UI Accelerate your troubleshooting workflow by reading log messages that make up trends in one single chart Find the source of the problem easily with unified filters and time controls to correlate logs and metrics together You can find more information here.  Splunk ITSI: Content Authorship for Cloud customers Starting with version ITSI 4.16, Splunk Cloud customers can Create, package, download, and install custom content using content pack authorship. Package Splunk and ITSI knowledge objects (e.g., Dashboards, Searches, Services, KPIs, Entities, Episodes) in content packs and share your custom solutions with other deployments. Two specific use cases content authorship in ITSI supports are: 1) Packaging a custom content pack for a specific use case in minutes instead of hours  2) Accelerate onboarding into production by moving the content easily and quickly from development and staging environments. Content authorship makes content building and packaging experience  fast and easy for users by automatically resolving dependencies for selected Splunk and ITSI knowledge objects. For more information, see Overview of creating custom content packs in ITSI. Shorten the setup time for synthetic tests Users can now easily verify that the steps in their synthetic tests are working during setup without losing their progress so they can execute functioning tests faster. With synthetic tests, users can check the performance and availability of their critical end-user journeys, in the absence of real user traffic, to detect and resolve end-user issues even before customers are impacted. For more, read the docs. Measure and control service data more efficiently With the latest detector enhancements, APM’s Autodetect now helps engineering teams more effectively measure and control their service data. Teams can detect when APM starts to throttle their trace data, correlate which events from their environment were the reason (such as workload increases or new releases), and identify the exact source that is being throttled. For more, read the docs. End Of Support for SignalFx Smart Agent The deprecated SignalFx Smart Agent will reach End Of Support on June 30th, 2023. If you are still using the SignalFx Smart Agent, you should migrate to the Splunk Distribution of OpenTelemetry Collector. Here’s a dedicated runbook that covers a set of recommended steps such as collecting logs, viewing OOTB dashboards, and using the configuration translation tool to help with the migration. You can find more information here.  ICYMI New APM Capabilities Help Optimize Application Performance Across Monoliths or Microservices Splunk Synthetics in Observability Terraform Provider Released Bring Order to On-call Chaos With Splunk Incident Intelligence New Splunk Observability Innovations Deliver Accelerated Troubleshooting for Engineering Teams Education Corner Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!    15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. Tech Talks: DevOps Edition Bring Order to On-Call Chaos with Splunk Incident Intelligence Wednesday, April 19th  11AM PT | Register This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! Share your thoughts on Observability and the Splunk Platform! The Splunk product design team wants to learn about how you use Splunk Enterprise & Splunk Cloud together with Splunk Observability Cloud. If you’re interested in spending an hour with us chatting 1:1 over Zoom, please fill out this quick questionnaire so we can reach out to you. Users of Splunk Cloud, Splunk Observability Cloud, and security products are all welcome. Any individual who completes the hour long 1:1 Zoom can receive a $100 USD Amazon gift card or choose to apply those funds to a charitable donation. Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation.   Until next month! Happy Splunking   ... View more