May 2023  Level Up Your Cybersecurity with Risk-Based Alerting Have you taken advantage of Risk-Based Alerting to reduce alert volume, gain higher fidelity alerts and get more context for analysis? Haylee Mills, Splunk Security Strategist, is here to help you get started on your RBA journey with an on-demand webinar RBA: The Future and Foundation of Next Generation Security and RBA blog series: RBA: The New Frontier for SIEM Level Up Your Cybersecurity with RBA Planning for Success with RBA Splunk SOAR Playbook of the Month: Identifier Reputation Analysis In the first entry of our new monthly series, the Splunk SOAR team is excited to share a more detailed look at the first playbook in our recent Enrichment Response Pack. Check out our blog on Identifier Reputation Analysis to see how your team can implement a workflow that will help them automate the alert and quarantine process for potential threats based on key identifier values. Machine Learning in Security  The Splunk Machine Learning for Security team has two tech talks now available to view on-demand. The Elevate Your DGA Detection Game tech talk highlights the recently developed DGA Deep Learning pre-trained model that can be deployed in Splunk to identify DGA threats. The Suspiciously Named Processes tech talk showcases how Splunk uses Deep Learning to detect suspiciously named processes and how to deploy the detection using the Splunk App for Data Science and Deep Learning.  The team also recently developed a new detection now available in Enterprise Security Content Update app that uses a pre-trained deep learning model to look for signs of DNS Tunneling using TXT payloads. Learn more about the detection in this blog. Model your response plans based on pre-built templates in Splunk Mission Control To help you unify your security operations, Splunk Mission Control includes a Response Templates feature to optimize case management efficiency and help standardize your team’s operational processes. Check out the video demo of response templates to learn more about how they can help your team streamline your workflows. Introducing the PEAK Threat Hunting Framework  The SURGe security research team has developed a new threat hunting framework to help you drive improvement in automated detection and stay ahead of attackers. The PEAK framework incorporates three types of hunts: hypothesis-driven, baseline, and model-assisted. Learn more about each and PEAK framework highlights in our introductory blog. New Security Content from the Splunk Threat Research Team  The Splunk Threat Research Team has had three releases of security content in the last month, which provide you with 21 new detections and 4 new analytic stories. Read our Product News & Announcements post to learn more.  The team has also published the following blogs to help you stay ahead of threats:  Threat Update: AwfulShred Script Wiper  These are the Drivers You are Looking For: Detect and prevent malicious drivers  Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise  Detecting Threats with Splunk Security Content - Q4 Roundup and corresponding Tech Talk  Talking Unified SecOps with Special Guest Allie Mellon  Forrester SecOps Analyst Allie Mellen joins Splunk for a conversation about SecOps market dynamics, how Splunk is unifying, simplifying and modernizing SecOps, and some SOC predictions. View the recording here.  Splunk Gets the Hat Trick  Splunk is proud to be recognized as a Leader in SIEM by three analyst firms. Learn more about each report’s findings in our blog, and download your own copy of each today.  Webinars  Splunking for Outcomes: Kicking Off Your RBA Journey  This 30-minute, success-oriented webinar features Splunk's Ted Skinner, as he shares best practices, considerations, and learnings around RBA implementation.  View this on-demand webinar if you are looking to implement RBA.    Scalable Security with Migration to Splunk Cloud Platform : Lessons Learned from Clayton Homes June 15 | 10 am PT Join Splunk’s own Olivia Henderson as she discusses best practices and lessons learned with Leonard Wall, Director of Information Security at Clayton Homes. Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!    Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more. Until Next Month, Happy Splunking   ... View more

    May 2023      Supercharge your value realization with Splunk Cloud Platform Accelerate your cloud adoption with migration to Splunk Cloud Platform and immediately enjoy the benefits of speed, scale, and security. Splunk platform capabilities delivered as a service — enables you to make confident decisions and take decisive action on insights from your data without needing to purchase, manage or deploy infrastructure. Watch this video to learn more.      Operationalizing Your Machine Learning Solutions The past few years have seen organizations have to cope with disruption on a global scale, with business resilience being tested like never before. As noted in our Digital Resilience Pays Off report, being able to prepare for change was a key factor in building resilience to thrive through uncertain times. One subject that is often close to change and innovation is Machine Learning (ML). With estimates suggesting that 87% of data science projects fail to make it to production, however, how can you successfully leverage innovative technologies? Join us to learn about how Splunk is approaching data science and machine learning to help you harness the power of your data. During this session, we discuss: How use of AI and ML can increase your insights, efficiency and ultimately resilience Some of the key challenges operationalizing ML in production systems How to use new features in the Machine Learning Toolkit (MLTK) to deploy pre-trained models in Splunk How MLTK and the Splu     Platform Edition Tech Talks and Office Hours Tech Talks: View Now! The Splunk Success Framework: Your Guide To Successful Splunk Implementations If you’re responsible for creating, maintaining or scaling your Splunk implementation, don’t miss this on-demand Tech Talk on the refreshed and revised Splunk Success Framework (SSF). Led by Ryan Smalley, Customer Success Core Products SME, this session will provide guidance on how to get started with the Splunk Success Framework and how it can benefit your organization. Introducing Edge Processor See how Splunk’s latest innovation in data processing can support use cases in your environment. Admin Your Splunk Cloud, Your Way Learn how to optimize your Splunk deployment and streamline common admin tasks with Admin Config Service (ACS).   Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET     Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.   Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more. Talk with us about Splunk! The Splunk product design team wants to learn about how you use our products. If you’re interested in contrib uting, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or  some other type of research invitation. We look forward to hearing from you!    Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.     .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

    May 2023      Observability Cloud End Of Support for SignalFx Smart Agent The deprecated SignalFx Smart Agent will reach End Of Support on June 30th, 2023. If you are still using the SignalFx Smart Agent, you should migrate to the Splunk Distribution of OpenTelemetry Collector. Here’s a dedicated runbook that covers a set of recommended steps such as collecting logs, viewing OOTB dashboards, and using the configuration translation tool to help with the migration. OpenTelemetry Insights Starting in the first week of June, the new OpenTelemetry Insights page will be available    for all customers. With the first release, this page will provide visibility into the OpenTelemetry Collector agents that you have deployed, which AWS EC2 hosts they are attached to along with the hosts that are not instrumented with the agent. You can easily plan and track your deployments based on the host and agent specific metadata.   Subscription usage billing cycle to switch to calendar month Starting July 1, we are introducing changes to standardize the measurement time period used to calculate subscription usage across all Observability products. Instead of using the current “Billing” Month, which is different for each customer and product, we will standardize to a calendar month cycle measurement period.  All usage measurements by product will remain unchanged, but each month’s start date will become the 1st of the month, ending on the last calendar day of the month. This will bring consistency across all Splunk products, and make usage measurements much simpler and more intuitive.    Note: There is no billing or financial impact to customers but some customers may encounter missing usage near the end of June’s monthly cycle. For example: If a customer's billing end-date is June 20th then the data in the monthly usage report from June 21st to June 30th will be missing. For any questions, feel free to open a support ticket.      Synthetics Synthetic Monitoring Wait Times & regional availability in EU Splunk is announcing new capabilities to customize and test on end-user interactions! Synthetic Monitoring has expanded availability, and Wait Times within Splunk Synthetic Monitoring helps IT and engineering teams enhance the span of coverage for browser tests to achieve more accurate results.     ICYMI It Takes a Village – And Some New Features From Splunk – To Scale Your Cloud Monitoring Without Breaking the Bank New APM Capabilities Help Optimize Application Performance Across Monoliths or Microservices Splunk Synthetics in Observability Terraform Provider Released Bring Order to On-call Chaos With Splunk Incident Intelligence New Splunk Observability Innovations Deliver Accelerated Troubleshooting for Engineering Teams     Splunk Lantern New product tip available in Lantern!  Review the Summarizing high-cardinality metrics by using metrics pipeline management article.  Review for expert guidance on monitoring observability ingest usage for your team.   Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more.     Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.   Talk with us about Splunk!  The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!    Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.   .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

May 2023      Splunk Scored a Hat Trick as Leader in SIEM!  Splunk is recognized as a Leader in SIEM by three analyst reports: Forrester Wave™ Q4 2022, the Gartner® Magic Quadrant™ for Security Information and Event Management, and the 2022 IDC MarketScape. To top it off, we are the ONLY vendor in the market to receive this recognition from all three analyst firms! Read the blog post Events Gartner Risk Summit: June 5-7 Splunk is a Platinum sponsor at the Gartner Security & Risk Summit being held at Gaylord Convention Center in National Harbor, MD.   Be sure to stop by Splunk’s booth or visit our session: Improve Digital Resilience through Unified Security Operations Tuesday, June 5 2023 @ 2:35PM.     AWS Public Sector: June 7-8 Splunk is a Silver sponsor at AWS Summit (DC) 2023 at the Walter E. Washington Convention Center.  This event is free to attend and includes sessions with Splunk and our partners.  Save the date and be sure to stop by Splunk’s booth #117.   Agenda & FAQ Register Here (free)   We Have Liftoff: June 22 Splunk’s inaugural “Launch n’ Learn” is taking place at the Kennedy Space Center on June 22nd in Cape Canaveral, Florida. This full day (free) event will explore how Aerospace & Defense agencies and their partners utilize Splunk’s machine data platform to solve complex problems and is co-sponsored by AWS, August Schell, and Carahsoft.  Space is limited  so register today. Register Today   In addition, read our new solution brief Splunk for Aerospace and Defense and visit our Website. Tech Talks and Office Hours Tech Talks: View Now! One Log To Rule Them All:  Centralized Troubleshooting with Logs Learn how you can centralize your log management across ITOps and engineering use cases. Logs are truly powerful. When combined with metrics and traces, they can give you key insights into why, what, and where the problem lies. They are fundamental for hybrid troubleshooting and monitoring, making them a critical component of the ITOps practitioner and engineer’s toolkit.  Watch the <2min trailer and register: Here The Splunk Success Framework: Your Guide To Successful Splunk Implementations If you’re responsible for creating, maintaining or scaling your Splunk implementation, don’t miss this on-demand Tech Talk on the refreshed and revised Splunk Success Framework (SSF). Led by Ryan Smalley, Customer Success Core Products SME, this session will provide guidance on how to get started with the Splunk Success Framework and how it can benefit your organization. Introducing Edge Processor See how Splunk’s latest innovation in data processing can support use cases in your environment. Admin Your Splunk Cloud, Your Way Learn how to optimize your Splunk deployment and streamline common admin tasks with Admin Config Service (ACS).   Admin Office Hours: Limited Spots Available - Register Now! Interested in getting live help from technical Splunk experts? Join our upcoming Community Office Hour sessions for Cloud and Hybrid/On-Prem Admins, where you can ask questions and get guidance on optimizing your Splunk deployment, monitoring performance, automating tasks, and more! Register for the upcoming Community Office Hour sessions: Awesome Admins: Managing Your Cloud Deployment - Wed, June 14 at 1pm PT/4pm ET Awesome Admins: Managing Your Hybrid/On-Prem Deployment - Wed, June 28 at 1pm PT/4pm ET Education Corner It’s Here! Announcing Our New Splunk Learning Platform A huge shout out to all the Splunk admins, architects, and users who enroll in Splunk Education courses to help keep their organizations safe, secure, and resilient. We want to keep you – and all of our curious learners – coming back for more!  Introducing our new, feature-rich Splunk Training and Enablement Platform (STEP) where you can access all eLearning, in-person enrollments, completed training, and course completion certificates. You can use the same familiar link (https://education.splunk.com), but once you arrive get ready for a more visual and engaging experience. Log in today, take a quick tour, and enroll in a course while you’re at it.  We Think There’s a Hero in All of Us Your hero’s journey to conquer Splunk Search Processing Language (SPL) starts here. Venture into the world of live, interactive Splunk technical training, claim victory over the content, and return to your organization with more knowledge about SPL than you ever imagined. It’s a three-part series taught by an experienced technical instructor – and it’s free! Get started today!  Get Your Cybersecurity Defense Analyst Certification at Splunk .conf23 in Vegas We’re excited to announce a new certification exam being released at .conf23! If you’re going to Las Vegas for Splunk .conf23, this is your exclusive opportunity to take the new Splunk Certified Cybersecurity Defense Analyst (CDA) exam. This is a beta exam, so it’s FREE to register and only available at .conf23 in Las Vegas from July 17 through July 20, 2023. Oh, and while you’re with us in Vegas, you can also take any Splunk certification exam with Pearson VUE on-site at .conf23 for only $25 (a $130 value). Can’t wait to see you! Splunkbase 2022: Year in Review - Infographic! It’s no surprise there’s an army of passionate customers and developers getting value from the Splunkbase app ecosystem. Check out the 2022 Splunkbase Year in Review infographic to get an inside look at the state of Splunkbase, including most searched and most popular apps, stats on feature and functionality improvements, and more! Check out the infographic here.     Splunk Lantern Check out this month’s Splunk Lantern community blog! This month we're excited to announce the release of fresh video content created in collaboration with Splunk Education. These videos showcase seasoned Splunk professionals discussing popular, customer-requested topics with product demos that show how to implement their recommendations. In addition to this new video series, we've also published a wealth of new informative articles this month, including a whole series of use cases for telecommunications organizations. Click through to learn more.   Talk with us about Splunk!  The Splunk product design team wants to learn about how you use our products. If you’re interested in contributing, please fill out this quick questionnaire so we can reach out to you. This may take such forms as a survey, receiving an email to schedule an interview session, or some other type of research invitation. We look forward to hearing from you!      Splunk Customer Support Did you know Splunk Customer Support offers both self-service and live support to customers when you need it. We recently revamped our Splunk Support page to make it easier for our customers to find all the resources  that are available to you at any time.     .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Visit conf.splunk.com for more information. Until Next Month, Happy Splunking ... View more

At Splunk, we are continuously working to enhance the security of Splunk Enterprise and Splunk Cloud Platform. As part of that effort, we have been working towards deprecating jQuery libraries older than v3.5 since the release of Splunk Enterprise v9.0 and Splunk Cloud Platform v8.2.2105 in early 2021. We intend to continue the deprecation process of older jQuery library usage for security purposes.  Your ACTION IS REQUIRED to prepare for the removal of pre-v3.5 jQuery libraries. For details on how to upgrade them in your Splunk instance, refer to Upgrade Your Splunk Instance to jQuery 3.5 in Three Simple Steps. Please see notes below for updates specific to your deployment type. For Splunk Enterprise Admins: Starting with the Splunk Enterprise v9.1, with an expected release sometime in June-August of 2023, usage of older jQuery libraries will be restricted by default. However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”. For Splunk Cloud Admins: Starting with the release of Splunk Cloud Platform v9.0.2208, use of older jQuery libraries is restricted by default.  However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”. We plan to remove the ability to use such libraries starting v9.0.2305 of Splunk Cloud Platform targeted for June-August 2023 timeframe. ... View more

  April 2023 | Check out the latest and greatest Unify Your SecOps with Splunk Mission Control: Watch the Webinar The convergence of SIEM and SOAR technologies simplifies and modernizes investigations by integrating detections, response templates, and automation. Watch this webinar to learn how Splunk Mission Control strengthens your digital resilience by bringing order to your security operations' chaos and allows you to simplify your security workflows. New Detections from the Splunk Threat Research Team  The Splunk Threat Research Team (STRT) has had two releases of security content in the last month, which provide you with 34 new detections and 4 new analytic stories. The new security content is available via the ESCU application update process or via Splunk Security Essentials (SSE).   Content release highlights include:  Detections related to CVE-2023-23397, a critical elevation of privilege (EoP) vulnerability affecting Microsoft Outlook for Windows A proof-of-concept for CVE-2023-21716, a critical vulnerability in Microsoft Word that allows remote code execution utilizing a heap corruption in rich text files Detections related to Okta IM2 logs for detecting suspicious authentication-based security attacks  Identifying the use of Silver, an OSS cross-platform adversary emulation/red team framework produced by BishopFox, that has gained more traction with adversaries as it is often seen as an alternative to Cobalt Strike The Splunk Threat Research Team has also published the following blogs to help you stay ahead of threats:  AsyncRAT Crusade: Detections and Defense Breaking the Chain: Defending Against Certificate Services Abuse   Threat Advisory: SwiftSlicer Wiper STRT-TA03 Machine Learning in Security: Detecting Suspicious Processes Using Recurrent Neural Networks Join Splunk at RSA Conference 2023  Splunk is excited to be joining the cybersecurity community back at the Moscone Center in April for RSAC. Stop by booth 5770 in the north expo to pick up a copy of the brand new book we’ll be releasing at the event, Bluenomicon: The Network Defender’s Compendium, and pick up some Splunk goodies. Learn more about Splunk at RSAC and sign up for a 15 minute conversation with a subject matter expert in the booth here. My Username Fields Have Passwords in Them! What Do I Do? Learn about the risks of password disclosure in authentication logs and how to use Security Orchestration Automation and Response (SOAR) to address this risk in near-real time in our recent blog. .conf23 Registration is Open  This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. You’ll learn from your peers who are addressing real-world security challenges, and we’ll cover a wide range of contemporary security topics from compliance to detection and response. Visit conf.splunk.com for more information. Overcome Cybersecurity Challenges to Improve Digital Resilience  At Splunk we strive to help customers overcome common security challenges associated with people, processes and technology. Read more to learn how automation, unified security operations, and tackling security as a data problem can help solve key cybersecurity challenges to improve digital resilience.  EDUCATION CORNER Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!  15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! Tech Talks: Security Edition Machine Learning in Security: Elevate Your DGA Detection Game Tuesday, May 2nd  | Register Now Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation. Until Next Month, Happy Splunking ... View more

  April 2023 | Check out the latest and greatest Communicating Data Stories to Executives: Top 5 Best Practices for Dashboard Design  How can you make sure any viewer of your dashboards can go “I understand what’s going on and exactly what I need to do/consider now”? Read this guide to discover best practices for ensuring your dashboards are informative and effective for any audience. Building Digital Resilience for SecOps, ITOps, and DevOps Bad things are bound to happen — cybersecurity threats, IT system stressors, and adverse events. In the face of these incidents, organizations must keep their systems secure and reliable. They need the ability to quickly and comprehensively detect, investigate and respond; pivot quickly when the macro-environment demands it; and ultimately learn from the experience to better and more efficiently respond to similar events in the future. They need to be resilient. Luckily for you, Splunk continues to release enhancements for a unified security and observability platform to build the digital resilience needed for our modern technological landscape. Operationalizing Your Machine Learning Solutions: Strategies for Success Implementing machine learning is key for fostering innovation. However, with estimates suggesting that 87% of data science projects fail to make it to production, how can you successfully leverage innovative technologies? Register for this webinar to learn how you can implement AI and ML to increase your insights, understand key challenges operationalizing ML in production systems, and use new features in the Machine Learning Toolkit (MLTK) to deploy pre-trained models in Splunk. Predictions: a Deeper Dive into the Rise of the Machines The impact of AI and automation on the retail industry should not be underestimated. The compound effects of improvements in technology and labor shortages have created an ideal scenario for innovation. In this blog, we will take a deeper look into some of the AI and automation use cases that we have seen in retail and outline some of the areas of focus to help you get started. A Cloud Strategy Conversation with Splunk Use Splunk Cloud Platform to search, analyze, visualize and act on your data with a flexible and cost-effective data platform as-a-service. This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! .conf23 Registration is Open This year’s event will be taking place July 17-20, 2023, at The Venetian Resort Las Vegas. Splunk University will be offered July 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. Join fellow experts in Security, IT and DevOps at .conf23 to learn, network and grow. Visit conf.splunk.com for more information. Share your thoughts on Observability and the Splunk Platform! The Splunk product design team wants to learn about how you use Splunk Enterprise & Splunk Cloud together with Splunk Observability Cloud. If you’re interested in spending an hour with us chatting 1:1 over Zoom, please fill out this quick questionnaire so we can reach out to you. Users of Splunk Cloud, Splunk Observability Cloud, and security products are all welcome. Any individual who completes the hour long 1:1 Zoom can receive a $100 USD Amazon gift card or choose to apply those funds to a charitable donation. Education Corner Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!    15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo   Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation. Until Next Month, Happy Splunking   ... View more

  April 2023 | Check out the latest and greatest Log Timeline in Observability now available! Get to the root cause faster by adding logs-based time charts in your Splunk Observability Cloud dashboards. Quickly visualize trends from log data like log volume or analysis of field values over time in a point-and-click UI Accelerate your troubleshooting workflow by reading log messages that make up trends in one single chart Find the source of the problem easily with unified filters and time controls to correlate logs and metrics together You can find more information here.  Splunk ITSI: Content Authorship for Cloud customers Starting with version ITSI 4.16, Splunk Cloud customers can Create, package, download, and install custom content using content pack authorship. Package Splunk and ITSI knowledge objects (e.g., Dashboards, Searches, Services, KPIs, Entities, Episodes) in content packs and share your custom solutions with other deployments. Two specific use cases content authorship in ITSI supports are: 1) Packaging a custom content pack for a specific use case in minutes instead of hours  2) Accelerate onboarding into production by moving the content easily and quickly from development and staging environments. Content authorship makes content building and packaging experience  fast and easy for users by automatically resolving dependencies for selected Splunk and ITSI knowledge objects. For more information, see Overview of creating custom content packs in ITSI. Shorten the setup time for synthetic tests Users can now easily verify that the steps in their synthetic tests are working during setup without losing their progress so they can execute functioning tests faster. With synthetic tests, users can check the performance and availability of their critical end-user journeys, in the absence of real user traffic, to detect and resolve end-user issues even before customers are impacted. For more, read the docs. Measure and control service data more efficiently With the latest detector enhancements, APM’s Autodetect now helps engineering teams more effectively measure and control their service data. Teams can detect when APM starts to throttle their trace data, correlate which events from their environment were the reason (such as workload increases or new releases), and identify the exact source that is being throttled. For more, read the docs. End Of Support for SignalFx Smart Agent The deprecated SignalFx Smart Agent will reach End Of Support on June 30th, 2023. If you are still using the SignalFx Smart Agent, you should migrate to the Splunk Distribution of OpenTelemetry Collector. Here’s a dedicated runbook that covers a set of recommended steps such as collecting logs, viewing OOTB dashboards, and using the configuration translation tool to help with the migration. You can find more information here.  ICYMI New APM Capabilities Help Optimize Application Performance Across Monoliths or Microservices Splunk Synthetics in Observability Terraform Provider Released Bring Order to On-call Chaos With Splunk Incident Intelligence New Splunk Observability Innovations Deliver Accelerated Troubleshooting for Engineering Teams Education Corner Reminder! New Splunk Learning Platform Launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework,  please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!    15K Subscribers Unite to Use YouTube for Splunk How-To Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too!  Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo Thought Leaders are Validating Training Rigor If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.  Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series. Tech Talks: DevOps Edition Bring Order to On-Call Chaos with Splunk Incident Intelligence Wednesday, April 19th  11AM PT | Register This month Splunk Lantern has been crunching all the numbers from the past financial year to publish a list of our most popular use cases across security and observability, as well as our hottest data articles. Read on to get inspired by the same Lantern articles that inspired so many Splunk users over the past year! We’ve also got a wealth of new use cases, product tips, and more to share with you.  Head to our monthly Community blog to check out all of the details! Share your thoughts on Observability and the Splunk Platform! The Splunk product design team wants to learn about how you use Splunk Enterprise & Splunk Cloud together with Splunk Observability Cloud. If you’re interested in spending an hour with us chatting 1:1 over Zoom, please fill out this quick questionnaire so we can reach out to you. Users of Splunk Cloud, Splunk Observability Cloud, and security products are all welcome. Any individual who completes the hour long 1:1 Zoom can receive a $100 USD Amazon gift card or choose to apply those funds to a charitable donation. Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne. We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation.   Until next month! Happy Splunking   ... View more

  March 2023 | Check out the latest and greatest Splunk APM's New Tag Filter Experience Splunk APM has updated its Tag filter experience! We have introduced a more intuitive filtering experience; with enhanced keyboard navigation and a history with your most recently viewed environments, services, and workflows. Navigate to APM in Splunk Observability to get started. Subscription usage report for hosts and containers For Admins of Splunk Observability, the Subscription Usage page for APM now provides detailed reports on Hosts and Container usage for up to 8 days of data. You can click on a peak, and download a list of hosts or container names that sent data to Splunk APM in a given minute. Click here to learn more. Memory Profiling support for Node.js and .NET Splunk APM AlwaysOn Profiling now supports memory profiling and runtime metrics for Node.js and .NET applications. The new capabilities help you troubleshoot memory hungry code by visualizing the memory allocation behavior of each component using a flame graph. In addition, you can monitor and alert on key runtime metrics for Node.js and .NET applications, including Heap usage, Garbage collection, Node.js Event loop lag, .NET Threadpools, etc. You can visualize and get notified when these metrics go beyond a threshold or when sudden changes occur, even on a specific host or container. Click here to get profiling data into Splunk APM.    ICYMI Getting Started with Observability: What is OpenTelemetry? Observability Documentation is now accepting community contributions We’ve just made it easier to ensure we’re providing the highest quality, most up-to-date Splunk Observability Cloud product documentation. Now anyone can refine and enhance Splunk Observability documents by adding new examples, documenting new settings, or adding new pages of prescriptive guidance. To get started, click Edit this page on any topic in https://docs.splunk.com/Observability. To learn more, see https://github.com/splunk/public-o11y-docs or this blog post. Splunk Lantern We are excited to announce new content in the Observability Use Case Explorer as well as a helpful Getting Started article on Log Observer Connect! * Identifying DNS reliability and latency issues * Monitoring availability and performance in non-public applications * Getting started with Log Observer Connect Mission Possible: Splunk Adoption Challenge Splunk Customer Success is recruiting new members for the Mission Possible: Splunk Adoption Challenge! The challenge contains 3 games with high-value content as ‘tasks’ that players need to ‘crack’. Players will start as Splunk rookie recruits and earn points and badges to become Double-O Splunk agents. The challenge is dedicated to helping the players learn about Splunk products, consume essential Splunk knowledge, and build digital resilience. Click HERE to enter the games! New Splunk Learning Platform launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich portal houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework, please complete it before May 17 – or you’ll have to start over. And, note that the system will be down between May 17-21. All the change will be worth it come May 22!  Learn and Earn with Splunk Education With the Splunk Learning Rewards program, customer-learners can earn points for completing at least three paid Splunk Education Courses. These points are available to redeem for Splunk swag by going to our Learning Rewards site, which can be accessed with your Splunk.com credentials. Oh, and if you’re the visual type, check out our fun video that shares all the learning rewards excitement. NEW Community Office Hours: Limited Spots Available - Register Today! Interested in getting hands-on, live help from a Splunk expert? Community Office Hours is a new program that you don’t want to miss. Here, you can ask questions and get live help from a technical Splunk expert on a different topic every month. You must register to attend a session. But spots are limited - so don’t miss out!  Talk to Splunk Product Design Our product design team is currently looking for Splunk users to talk to about their experiences with Splunk products. Sign up here to participate in upcoming studies and shape the future of our products and roadmaps! Join our Customer Advisory Boards to get early access to product releases Sign up and join our April 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.   Until Next Month, Happy Splunking! ... View more

  March 2023 | Check out the latest and greatest Unify Your Security Operations with Splunk Mission Control  The recent release of Splunk Mission Control allows your SOC to detect, investigate, and respond to threats from one modern, unified work surface. Learn more about how to utilize Mission Control to streamline your security workflows with response templates and modernize your security operations with automation in our product news and announcements post.  Splunk SOAR 6.0  On February 22nd, Splunk released SOAR version 6.0.0, and this release marks the start of our integration efforts with Splunk Mission Control to provide a unified security operations solution. This includes a new integrated browsing experience, the ability to enable SOAR playbooks and actions to run against Mission Control data and lastly a deep integration into the Visual Playbook Editor (VPE) to write playbooks for Mission Control, without the need for custom code or configuration. SOAR 6.0.0 also includes exciting new features and comes with a new version of the Automation Broker (AB). Read the SOAR 6.0 Release Notes here, and release notes for Automation Broker here to learn more. Rapid Detection and Incident Scoping with Splunk ES 7.1  Watch our on-demand webinar to learn how the recent release of Splunk Enterprise Security can help you:  Detect suspicious behavior in real time using cloud-based streaming analytics Quickly discover the scope of an incident and respond with accuracy using “threat topology visualization” Improve security workflow efficiencies with the new embedded “MITRE ATT&CK visualization” feature New Detections from the Splunk Threat Research Team  The Splunk Threat Research Team (STRT) has had three releases of security content, which provide you with 45 new detections and 7 new analytic stories. The new security content is available via the ESCU application update process or via Splunk Security Essentials (SSE). The Splunk Threat Research Team has also published the following blog to help you stay ahead of threats: Fantastic IIS Modules and How to Find Them  Splunk at RSA Conference 2023  If you’ll be attending RSA in April, be sure to stop by booth 5770 to say hello, grab a Splunk T-shirt and pick up a copy of the brand new book we’ll be releasing at the event. Stay and learn about the latest and greatest happening with Splunk Security by getting a demo or watching a booth presentation, and check out one of the three talks being given by Splunk SURGe team members: Threat-informed Planning with Macro-level ATT&CK Trending Rethinking Recruiting: Effective Hiring Practices to Close the Skills Gap Trust Unearned? Evaluating CA Trustworthiness Across 2 Billion Certificates Suggested Security Reading  Did you know that every month Splunk security experts curate a list of suggested content that they think provides value to security professionals? Take a look at all of our security staff picks here, and happy reading! Tune in for a must see Tech Talk! Security Edition Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat Topology and MITRE ATT&CK Visualizations   Tuesday, March 28, 2023  |  11am–12pm PT Register Now Mission Possible: Splunk Adoption Challenge Splunk Customer Success is recruiting new members for the Mission Possible: Splunk Adoption Challenge! The challenge contains 3 games with high-value content as ‘tasks’ that players need to ‘crack’. Players will start as Splunk rookie recruits and earn points and badges to become Double-O Splunk agents. The challenge is dedicated to helping the players learn about Splunk products, consume essential Splunk knowledge, and build digital resilience.  Click HERE to enter the games! New Splunk Learning Platform launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich portal houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.  Pro Tip: If you have in-progress coursework, please complete it before May 17 – or you’ll have to start over. And, note that the system will be down between May 17-21. All the change will be worth it come May 22!  Learn and Earn with Splunk Education With the Splunk Learning Rewards program, customer-learners can earn points for completing at least three paid Splunk Education Courses. These points are available to redeem for Splunk swag by going to our Learning Rewards site, which can be accessed with your Splunk.com credentials. Oh, and if you’re the visual type, check out our fun video that shares all the learning rewards excitement. NEW Community Office Hours: Limited Spots Available - Register Today! Interested in getting hands-on, live help from a Splunk expert? Community Office Hours is a new program that you don’t want to miss. Here, you can ask questions and get live help from a technical Splunk expert on a different topic every month. You must register to attend a session. But spots are limited - so don’t miss out!  Talk to Splunk Product Design Our product design team is currently looking for Splunk users to talk to about their experiences with Splunk products. Sign up here to participate in upcoming studies and shape the future of our products and roadmaps! Join our Customer Advisory Boards to get early access to product releases Sign up and join our April 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.   Until Next Month, Happy Splunking!   ... View more

 March 2023 | Check out the latest and greatest Introducing Splunk Edge Processor, simplified data transformation Now generally available, Splunk Edge Processor provides Splunk Cloud Platform customers new abilities to easily filter, mask, and route data. These data transformations are powered by Splunk’s next-generation Search Processing Language (SPL2), which simplifies data preparation and search. With Edge Processor, customers will have improved visibility into and control over streaming data at the edge - inside their networks and close to the data source. Dashboard Studio Challenge - learn new tricks, showcase your skills, and win prizes! This challenge is an opportunity to level up your dashboard skills, showcase your visualizations, and win a $100 gift card to the Splunk Store. We supply the themes and the datasets. You create an impactful, story-telling dashboard in Dashboard Studio. It’s that easy! Register here to enter the challenge. Explore additional use cases with our new Lantern tool! We’re excited to announce the launch of the new Use Case Explorer for the Splunk Platform!  This tool contains Splunk Enterprise and Splunk Cloud Platform use cases developed for five key industries - Financial Services, Healthcare, Retail, Technology Communications and Media, and Public Sector - as well as use cases designed to help you achieve Security and IT Modernization goals. Check out the Use Case Explorer for the Splunk Platform, plus find all the latest Lantern news in our latest blog update, and please let us know what you think! Bring More ML to Splunk: Inference Externally Trained Models in Machine Learning Toolkit 5.4 The latest release of the Splunk Machine Learning Toolkit (MLTK) enables users to upload their pre-trained ONNX models in MLTK with a simple UI. Once the model is in Splunk, users can use the model with their Splunk data with no modification to their existing workflows. Read more how this capability extends the usability of MLTK and ML-SPL beyond models trained using MLTK, unlocking more use cases with externally trained data models. The start of Splunk’s unified language: SPL2 Profile for Edge Processor The new Edge Processor uses SPL2, Splunk’s powerful and flexible data language for data at rest and in motion, designed to serve as the single entry point for a wide range of data handling scenarios and in the future will be available across multiple products. The SPL2 Profile for Edge Processor contains the specific subset of powerful SPL2 commands & functions that can be used to control & transform data behavior within Edge Processor. Read more about SPL2. Tune in for a must see Tech Talk! Platform Edition Tips & Tricks When Using Ingest Actions Tuesday, March 28, 2023  |  12pm–1pm PT Mission Possible: Splunk Adoption Challenge Splunk Customer Success is recruiting new members for the Mission Possible: Splunk Adoption Challenge! The challenge contains 3 games with high-value content as ‘tasks’ that players need to ‘crack’. Players will start as Splunk rookie recruits and earn points and badges to become Double-O Splunk agents. The challenge is dedicated to helping the players learn about Splunk products, consume essential Splunk knowledge, and build digital resilience.  Click HERE to enter the games! New Splunk Learning Platform launching on May 22! We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich portal houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.    Pro Tip: If you have in-progress coursework, please complete it before May 17 – or you’ll have to start over. And, note that the system will be down between May 17-21. All the change will be worth it come May 22!  Learn and Earn with Splunk Education With the Splunk Learning Rewards program, customer-learners can earn points for completing at least three paid Splunk Education Courses. These points are available to redeem for Splunk swag by going to our Learning Rewards site, which can be accessed with your Splunk.com credentials. Oh, and if you’re the visual type, check out our fun video that shares all the learning rewards excitement. NEW Community Office Hours: Limited Spots Available - Register Today! Interested in getting hands-on, live help from a Splunk expert? Community Office Hours is a new program that you don’t want to miss. Here, you can ask questions and get live help from a technical Splunk expert on a different topic every month. You must register to attend a session. But spots are limited - so don’t miss out!  Talk to Splunk Product Design Our product design team is currently looking for Splunk users to talk to about their experiences with Splunk products. Sign up here to participate in upcoming studies and shape the future of our products and roadmaps! Join our Customer Advisory Boards to get early access to product releases Sign up and join our April 2023 Customer Advisory Boards! You’ll get access to previews of new products and capabilities, interact with industry experts and provide feedback to influence the future of Splunk products. Use this link to sign up! Contact us at advisoryprograms@splunk.com with any questions.   Until Next Month, Happy Splunking! ... View more

Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for AI / Machine Learning based Analytics to supercharge threat detection and minimize the operational overheads of maintaining conventional static detection rules in large scale SOC. However, use of AI / Machine Learning in Security Operations is challenging due to the complex cyber security big data and numerous attacker techniques.    In this webinar, Muath Saleh and Hafiz Farooq (from Saudi Aramco) shall explain how to use the analytical power of Splunk to hunt for cyber and insider threats, and also utilizes the Splunk Machine Learning Toolkit (MLKT) for novelty and outlier detection from the noisy security datasets. This webinar purviews Saudi Aramco’s experience of using Splunk for handling security big data, and explains amazing key capabilities for effective operational security procedures and threat hunting. ... View more

  Join Splunk and Sens Consulting for this Security Edition Tech Talk Who should attend:  Security Analysts, SOC Managers Microsoft Defender Threat Vulnerabilities data contains valuable information about software vulnerabilities in your environment. Defender also has device tagging capabilities which will enhance your asset list in Splunk Enterprise Security. So let's get this data into Splunk and elevate your security overview.   Tune in for Maximize the value from Microsoft Defender with Splunk to see how to prepare the data in Microsoft Defender and collect and normalize it into the Vulnerability data model. Afterwards you will end up with a dashboard on a System Manager level - revealing the risks both in a specific system and across the organization. All of this is packed into a technical add-on which will be available for you. Speakers: Mikael Bjerkeland, Security Sales Engineer, Splunk Andreas Søvik - Senior Consultant, Sens Consulting Thomas Hillesøy - Senior Consultant, Sens Consulting Splunkbase App: Microsoft 365 Defender Threat Vulnerability Add-on for Splunk   ... View more