What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help.  If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource.   SECURITY Tech Talk | Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, Investigation, and Response November 6, 2025 at 11am PT Join Splunk experts for an engaging and interactive Tech Talk, showcasing what you need to know before you upgrade and how: SOC teams should expect a new workflow to triage alerts and run investigations. SOC analysts will enjoy a native integration throughout the triage and investigation workflow with Splunk SOAR. The terminology across the UX has been aligned to the Open Cybersecurity Schema Format. Splunk Enterprise Security 8.x will support backward compatibility for most data in Enterprise Security including data in existing indexes. Security engineers and Splunk administrators will need to take action to leverage the latest innovations and features powered by ES 8 and Splunk SOAR. Office Hours | Splunk Enterprise Security - the AI Powered SecOps Platform November 18, 2025 at 11am PT What can I ask in this AMA? What is different in the latest Splunk Enterprise Security, the AI powered SecOps Platform? Why upgrade to Enterprise Security 8 and why now? What are upgrade considerations and prep work? What do I need to know as a SOC Analyst, Detection Engineer, or SOAR engineer before and after my upgrade to Enterprise Security 8? What is the difference between Enterprise Security Essentials and Enterprise Security Premier? Anything else you'd like to learn!     OBSERVABILITY Tech Talk | Splunk Observability for AI   November 5, 2025 at 11am PT In this session, you will learn how: Splunk's agentic, AI-powered observability ties business context to telemetry, turning insights into improved reliability and reduced toil. To monitor the quality, accuracy, security, and cost of LLM and agentic applications to ensure they are operating as intended. To pinpoint noisy neighbors and troubleshoot issues of resource contention and unmet workload demands to respond to performance threats, degradations, and inefficiencies in real-time. Office Hours | Observability: Splunk IT Service Intelligence (ITSI) November 19, 2025 at 11am PT What can I ask in this AMA about ITSI? How can I incorporate ITSI's AI-powered features like EventIQ to help reduce alert noise? What kinds of Executive Dashboards can I build to visualize the health of the business? How can I respond to issues faster with features like Episode Summarization? Anything else you’d like to learn!     PLATFORM Office Hours | Platform: Data Management & Federation November 20, 2025 at 11am PT What can I ask in this AMA? How do Edge Processor/Ingest Processor and Federated Search for Amazon S3 work together? Can I get a demo? How can I configure Edge Processor in Splunk Enterprise (on-prem)? How can I onboard data from any data store or end points? How does Splunk enable data federation across Amazon Security Lake (ASL) and S3? What tools are available to me? How can I optimize my Edge Processor or Ingest Processor SPL2 pipelines? Anything else you’d like to learn!     APPDYNAMICS Webinar | AIOps and Splunk AppDynamics Anomaly Detection November 26, 2025 at 10am CET Customers will learn how AppDynamics Anomaly Detection enhances visibility across applications and services by automatically highlighting abnormal behavior, accelerating troubleshooting, and improving operational efficiency. ... View more

[Registration Coming Soon]  This thread is for the Community Office Hours session on Splunk Observability Cloud - Synthetic and Real User Monitoring (RUM) on Tuesday, Dec 9, 2025 at 11 am PT / 2 pm ET.   Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk products and use case topics.    In this session, we will focus on Digital Experience Monitoring, specifically Real User Monitoring (RUM) and Synthetic Monitoring. Bring your questions and get direct insights from the team.   What can I ask in this AMA? How do I get a more complete view of the user experience on my app or website? How do I correlate front and backend investigations? Can you give me tips on proactively finding and fixing performance issues? How can I gain insights into user engagement and behavior? Anything else you'd like to learn!   Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (sign in with SSO here).    Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.   Look forward to connecting! ... View more

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you! What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. OBSERVABILITY Tech Talk | Observe and Secure All Apps with Splunk October 14, 2025 at 1O1am PT In this session, you will learn how to: Detect and protect against runtime attacks in real-time—from common exploits to sophisticated zero-day threats like the recent Shai Hulud Supply Chain Attack—directly within your applications. Prioritize threats based on actual business risk and impact, moving beyond simple severity scores to focus on what truly matters. Arm your application and security teams with actionable intelligence delivered straight to the Splunk tools you already trust. AppDynamics Expert Insight Series | Expand AppDynamics Repsonse and Alert Functionality with Webhook Integrations October 16, 2025 at 12PM PT Discover how to: Streamline alert and response practices with Splunk AppDynamics Integrate with leading incident management and communication platforms using webhooks, with a live demo on setting up targeted notifications for faster, more effective responses. Tech Talk | Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot faster October 21, 2025 at 11am PT We’ll cover two powerful, free integrations available to all joint Splunk Observability Cloud and ThousandEyes customers: Visualize global user experience and network health together to isolate issues faster Drill from synthetic tests into backend traces with just a few clicks Correlate application traces with network telemetry to uncover the true root cause Tech Talk | Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform October 27, 2025 at 11am PT Join this Tech Talk to learn how to: Gain a unified view of IT health using Splunk's powerful data platform Integrate Splunk alerts with Event-Driven Ansible Use Event-Driven Ansible to design your desired response to a given IT event or incident Apply this solution to key operational challenges Apply technical resources to get started Tech Talk | Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM October 28, 2025 at 11am PT Here’s what you’ll learn: OpenTelemetry (OTel) Integration Observability & Monitoring for Kubernetes Infrastructure Faster Incident Detection & Resolution (MTTD & MTTR) Traffic Pattern & Release Impact Analysis Infrastructure Optimization & Scalability How to Be Awesome at Splunk AppDynamics Query Language (ADQL) #2: Splunk AppDynamics Data Collectors and ADQL Searches   October 28, 2025 at 12PM PT Building further on the foundation of our 1st ADQL session, we'll: Add data collectors into the mix to show how to correlate even more business context with analytics! Learn how to use the values customers enter (which are often specifics not normally captured by OOTB observability agents) to dig deeper into trouble shooting scenarios. Focus on capturing meaningful relational context that impacts or directly influences the bottom line of a business. (IE loan amounts, shopping cart values, regional patterns, etc) PLATFORM Office Hours | Splunk 10.0: Your Guide to a Smooth Upgrade Journey October 2, 2025 at 1pm PT What can I ask in this AMA about the next Splunk upgrade? What is included in Splunk 10? What are the key innovations in Splunk 10 that customers should know about? What is the benefit of upgrading to Splunk 10? How can I upgrade to Splunk 10 and what is inclusive of upgrade readiness? How can I use the Splunk Health Assistant Add-on? (address EOL Upgrade Readiness App) SCP vs Splunk Enterprise Upgrade Readiness What are the breaking changes customers need to be aware of and action on? Office Hours | Platform: Splunk Cloud Migration October 23, 2025 at 11am PT What can I ask in this AMA? What are the primary benefits realized from moving to the Splunk Cloud Platform? What are the essential steps to prepare an on-prem Splunk environment for cloud migration? What are the key approaches and considerations for a successful cloud migration? How can I lower the Total Cost of Ownership (TCO) with the Splunk Cloud Platform? How can users optimize Splunk performance with the Splunk Cloud Platform? What are the key management differences between an on-prem and SaaS-deployed environment of Splunk? What are the different migration engagement models (i.e. self-service, partner-led, services-led)? Anything else you'd like to learn! ... View more

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource.   SECURITY Tech Talk | Operationalizing TDIR: Building a More Resilient, Scalable SOC August 13, 2025 at 11am PT In this Security Tech Talk, we’ll explore: How to operationalize automation to reduce manual effort and alert fatigue What it takes to build context-driven investigations with visibility across hybrid environments Why enriched asset, identity, and threat intel data are critical for prioritizing response Practical ways to modernize legacy SOC workflows—without ripping and replacing your existing stack Office Hours | Enterprise Security August 20, 2025 at 1pm PT What can I ask in this AMA? What are the latest updates in Splunk Enterprise Security? How can I implement Risk-based alerting (RBA)? How can I utilize Threat Intelligence Management and Cisco Talos for better context? How do I access the latest out-of-the box detections? Which Splunkbase apps and add-ons are recommended for Splunk Enterprise Security use cases? Anything else you’d like to learn! Tech Talk | Leveraging Automated Threat Analysis Across the Splunk Ecosystem August 28, 2025 at 11am PT In this session we’ll cover: An overview of Splunk Attack Analyzer and its automated threat analysis capabilities Examples of how you can use these automated threat analysis capabilities alongside Splunk Enterprise Security and Splunk SOAR Resources to help you make the most of Splunk Attack Analyzer in combination with other Splunk products. OBSERVABILITY Office Hours | AppDynamics August 21, 2025 at 11am PT What can I ask in this AMA? What are the latest updates in AppDynamics? How can I use AppDynamics Business iQ to monitor critical business metrics? How can I deploy AppDynamics Agents in different settings? How can I use AppDynamics Secure Application to ensure applications are secure and high-performing? What are best practices for crafting AppDynamics Query Language (ADQL) queries? Anything else you’d like to learn! PLATFORM Office Hours | Splunk Search August 19, 2025 at 11am PT What can I ask in this AMA? How can I optimize this search query so it runs faster? How do I translate my question into SPL? What are common use cases/prompts for the AI Assistant for SPL? How do I set up federated search for Amazon S3? How do I convert my SPL into SPL2? How do I create an alert/visualization/dashboard from my search? Anything else you’d like to learn! Tech Talk | Introducing Splunk 10.0 August 21, 2025 at 11am PT Key Takeaways Get an exclusive look at the next version of Splunk Enterprise 10.0 and Splunk Cloud Platform 10.0 Discover new features and functionalities designed to make your workflows faster, easier, and more efficient. Review upgrade readiness strategies to ensure a smooth and seamless transition to the latest version. ... View more

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. OBSERVABILITY Office Hours | Splunk Infrastructure Monitoring June 17, 2025 at 1pm PT What can I ask in this AMA? What are some enhancements to the Kubernetes Monitoring experience in Splunk IM? How do I use and customize Kubernetes navigators? What are best practices for optimizing Kubernetes alerts and troubleshooting workflows? Is there a way to view Kubernetes logs correlated with metrics? What are some top services that I should be monitoring? Anything else you'd like to learn about! PLATFORM Office Hours | Platform: Federated Data Management June 18, 2025 at 1pm PT What can I ask in this AMA? How do Data Management, Federated Search, and Federated Analytics work together? Can I get a demo? How can I optimize my data design according to its use case (detection, investigation, threat hunting, compliance, etc.)? How does Splunk enable data federation across Amazon Security Lake and S3? What tools are available to me? How can I onboard data from any data store or end points? How can I start filtering and routing data with Edge Processor or Ingest Processor? How can I optimize my Edge Processor or Ingest Processor pipelines? Anything else you’d like to learn! ... View more

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource.   OBSERVABILITY Tech Talk | Best Strategies to Optimize Observability Costs May 6, 2025 at 11am PT We’ll cover how to: Reduce log ingestion for new use cases and optimize licensing​ Centralize pipeline management​ Gain visibility into metric volume and usage to identify waste​ Overcome tool sprawl​ And much more! Office Hours | Data Management in Observability Cloud May 20, 2025 at 11am PT What can I ask in this AMA? What capabilities does Splunk have to balance costs and data volume? How does the Splunk Distribution of the OpenTelemetry Collector help filter out data to reduce ingestion costs? What are some ways that I can scale confidently without breaking the bank? How can I filter, aggregate, and archive data for optimal storage and analytics? Anything else you'd like to learn about! PLATFORM Tech Talk | Mastering Data Pipelines: Unlocking Value with Splunk May 8, 2025 at 11am PT Join this Tech Talk to learn how Splunk can help you unlock the value of your security and observability data by building an effective data management strategy. Understand how Splunk’s approach to federated data management can help you maximize the value of data. Build effective pipelines using our latest SPL2-powered data processing capabilities to collect, transform and route data based on your business needs. Run effective searches on data in Amazon S3 without having to ingest or index data into Splunk. Tech Talk | Advanced Splunk Data Management Strategies May 14, 2025 at 11am PT Join us for an insightful Tech Talk where we explore key learnings and best practices learned from a recent study of SOC practitioners on data management: What are the current challenges with data ingestion? What to think about as you consider data relevance in a finely tuned TDIR practice? What outcomes can you expect by deploying advanced data management strategies? Office Hours | Platform: Splunk + Cisco Integrations May 22, 2025 at 1pm PT What can I ask in this AMA? What Splunk and Cisco integrations are available today? What tools/TAs can I use to integrate my Splunk and Cisco data? How can we ingest ASA, IOS, Meraki, or ThousandEyes data? How can I view and analyze incidents within Splunk ES using Cisco XDR as a data source? How do AppDynamics and Splunk Observability Cloud work together? Anything else you’d like to learn! ... View more

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. SECURITY Office Hours | Security: SOAR April 16, 2025 at 1pm PT What can I ask in this AMA? What are the latest features of SOAR that I should know about? How do Splunk SOAR Playbooks and Actions integrate with Splunk Enterprise Security? How can I leverage the Automation Rules feature to assign playbooks to detections and automate the process? What are the best practices for developing playbooks, workbooks, and process workflows? How do I implement Guided Automation to further optimize the playbook-building process? What are the best practices for setting up prompts in SOAR? Anything else you’d like to learn! OBSERVABILITY Office Hours | AI Assistant in Splunk Observability Cloud April 15, 2025 at 1pm PT What can I ask in this AMA? How can I use the AI Assistant in Observability Cloud to: Speed up investigations w/ faster root cause analysis and guided troubleshooting Easily uncover key insights and make more informed decisions Lower the learning curve for you and your team with Splunk Observability Cloud Anything else you'd like to ask! Webinar | Drive Business Outcomes with Splunk AppDynamics Business iQ Insights April 23, 2025 at 10am PT In this webinar you’ll learn: Instant business-centric insights: Discover how your applications drive business outcomes. Unified visibility: Learn how you can combine app and infrastructure telemetry with business metrics in a single, real-time view with customizable dashboards. Data-driven results: Quickly identify, prioritize, and resolve issues that have the greatest impact on your business.  PLATFORM Tech Talk | The Latest Cisco Integrations with Splunk Platform! April 24, 2025 at 11am PT Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve been working on solutions for integrating product lines like Meraki and UCS, as well as tools like ThousandEyes and Catalyst Center, helping organizations enhance visibility, strengthen security, and drive resilience. Whether you’re looking to optimize performance, streamline operations, or gain deeper insights, this session is packed with insights you won’t want to miss.   APP DEV Office Hours | Future Proofing Your Splunk Apps: OpenSSL 3 and More April 17, 2025 at 1pm PT What can I ask in this AMA? Why is Splunk transitioning to Open SSL version 3 and when? Which customers will be impacted by the OpenSSL3 upgrade? How can I prepare my Splunk environment and applications for Open SSL3? What tools are dependent on OpenSSL3? What benefits will I get with the FIPS-140-3 certified OpenSSL3 library? What will happen if my app or client using SSL 3.0, TLS 1.0, TLS 1.1 tries to establish a connection with Splunk running OpenSSL3? What will happen to my apps if we ship OpenSSL3, but some apps use TLS 1.0 or 1.1? Tech Talk | Holistic Visibility and Effective Alerting Across IT and OT Assets April 21, 2025 at 11am PT Join this Tech Talk to learn how: To gain complete visibility into all hosts and their potential vulnerabilities, misconfigurations and unpatched components in a single analytics platform. To add Tenable asset and exposure risk context improves alert prioritization. Joint customers use Splunk for Centralized Reporting. ... View more

🍀A new season is on the horizon, and March brings fresh opportunities to grow! Our Community Office Hours, Tech Talks, and Webinars will help you develop new skills, spark your creativity, and connect with like-minded professionals. Whether you’re welcoming spring or just seeking a burst of inspiration, these events have you covered. Explore the details below and make this month count! 🌸  What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you! What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource.   SECURITY Office Hours | Security: Cisco Talos Integration March 19, 2025 at 1pm PT What can I ask in this AMA? How does Cisco Talos threat intelligence integrate with Splunk Security products? What kinds of intelligence are provided by the Cisco Talos integrations? How can I start using Cisco Talos intelligence in my Splunk Security products? Anything else you’d like to learn! Tech Talk | SOC Modernization: How Automation and SOAR are Shaping Next-Gen Security Teams March 26, 2025 at 11am PT Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower SecOps to automate time-consuming workflows, orchestrate investigations, enhance threat detection, and speed up response times. Discover how an automation-first approach to security operations helps teams stay ahead of sophisticated adversaries and adapt to evolving techniques and threats. OBSERVABILITY Office Hours | Debugging Microservices with Observability Cloud March 18, 2025 at 1pm PT What can I ask in this AMA? How do I detect issues with microservices and address them quickly? How do features like Service Centric Views, Tag Spotlight, and Trace Analyzer accelerate the troubleshooting process? How do Observability Cloud and Splunk Cloud/Enterprise work together to enhance troubleshooting capabilities? Anything else you'd like to learn about! Tech Talk | Ask It, Fix It: Faster Investigations With AI Assistant in Observability Cloud March 25, 2025 at 11am PT Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With this new GenAI-powered experience, Splunk users can easily extract insights in Splunk Observability Cloud and accelerate their investigations simply by asking questions using natural language. In this session, we’ll go over: An overview of the AI Assistant and its main functionalities Best Practices for AI Assistant: when and how to use it effectively A demo covering monitoring and troubleshooting examples PLATFORM Workshop | Splunk Data Management Workshop: SPL2 Deep Dive March 4, 2025 at 11am PT Get a technical deep-dive on how to leverage SPL2 in Data Management. Learn how to effectively build pipelines in Edge Processor & Ingest Processor to collect, transform, and route your data like never before. Key takeaways: Learn how SPL2 is leveraged in Edge & Ingest Processor Understand the differences between SPL vs. SPL2 Get key SPL2 commands for filtering, masking, and enriching data Demo walking through common use cases and how to build SPL2 pipelines to process and route data to Splunk or Amazon S3 Office Hours | Splunk AI: Ask me Anything March 20, 2025 at 1pm PT What can I ask in this AMA? How does Splunk use generative AI? What are some common use cases to get started with the Machine Learning Toolkit (MLTK) app? How can Splunk help me monitor and secure my generative AI applications? How do the Splunk AI Assistants keep customer data confidential? How can I leverage ML for anomaly detection? Can I develop and package a custom machine learning model in Splunk? Anything else you’d like to learn! ... View more

💌Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, and Webinars! 🌹 Whether you’re in the Valentine’s Day spirit or simply seeking new inspiration, our engaging events will help you refine your skills and energize your creativity all month long. Check out the details below! ✨  What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. SECURITY Office Hours | Security: Threat Investigation and Analysis February 19, 2025 at 1pm PT This is your opportunity to ask questions related to your specific Splunk threat investigation, analysis needs and use cases, including: What are the best practices for enhancing threat investigation and analysis? How can I help my SOC save time on those missions? How do I maximize the use of threat intelligence and contextual insights when investigating active threats? Which Splunk tools should I leverage to help optimize and automate the process of analyzing and investigating threats? How can Splunk help me get through phishing investigations more efficiently? How does Splunk Attack Analyzer complement SOAR tools and capabilities? How is it integrated with other Splunk security solutions? Anything else you’d like to learn! Tech Talks | Leverage Cisco Talos Threat Intelligence Across Splunk Security Products February 26, 2025 at 11am PT Join this Tech Talk to learn about these integrations, including: The types of intelligence provided by the Cisco Talos integrations How that intelligence is incorporated into your existing security workflows How to get up and running with the integrations OBSERVABILITY Tech Talks | 3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? February 25, 2025 at 11am PT Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and Trace Analyzer, together with your existing Splunk deployment, can help you get to the leaderboard! Ask questions from product experts, watch demos, and learn more about the product! Key Takeaways How Splunk can help you debug problems in microservices faster Splunk tools that can help you accelerate troubleshooting How to use Splunk Cloud/Enterprise for additional use cases PLATFORM Data Management at Splunk: Applying Your First Pipeline February 18, 2025 at 11am PT Learn how to get started with the Splunk pipeline builders. Follow along to configure your edge nodes in Edge Processor and build a basic SPL2 pipeline to filter, mask, transform, and route data to Amazon S3. Key takeaways: Learn the differences between Edge & Ingest Processor (deployment, architecture, capabilities, use cases, etc.) Edge Processor setup demo SPL2 overview & key commands Demo on building your first pipeline to process and route data to Splunk or Amazon S3 Tech Talks | What’s New in Splunk Enterprise 9.4: Tools for Digital Resilience February 27, 2025 at 11am PT Tune in to What’s New in Splunk Enterprise 9.4: Tools for Digital Resilience and find out how to: Improve operational efficiency and monitor distributed health with Deployment Server Enhance your dashboards with updates to Dashboard Studio, including native version control support and tab interaction experience Understand how Splunk helps increase uptime in SHCs due to lookup out-of-sync issues Maximize visibility with Federated Search for metrics, events, and more! ... View more

❄️ Welcome the new year with our January lineup of Community Office Hours, Tech Talks, and Webinars! 🎉 Whether you're forging new resolutions or simply seeking fresh inspiration, this month's events will help you sharpen your skills and spark your creativity. Check out the details below! 🌟  What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you! What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. SECURITY Office Hours | Security: Ask Me Anything January 15, 2024 at 1pm PT This is your opportunity to ask questions about your specific Splunk Security needs. Our experts are ready to answer all your questions in our first broad security topic session, such as... How can you get started with Splunk Security better? What are the essential steps? What are the latest innovations in ES, SOAR, Mission Control, SAA, and so on? What are the best practices for implementing security use cases, like incident management, RBA, automation, and so on? What is the best approach to building a unified workflow with ES, SOAR, and other security products? What are Splunk Security's third-party integrations, and how can these tools be configured best? What is the magic of industry frameworks such as ATT&CK, Cyber Kill Chain work within ES and SOAR? Anything else you’d like to learn!   OBSERVABILITY Office Hours | Splunk Application Performance Monitoring January 14, 2024 at 1pm PT What can you ask in this AMA? How can I send traces to APM? How do I track service performance with dashboards? What are some tips for setting up deployment environments? What are AutoDetect detectors, and how can I use them? What are best practices for high-value features like Tag Spotlight and Service-Centric views? How do I set up business workflows? Anything else you'd like to learn!   APP DEVELOPMENT Office Hours | Splunk App Development January 16, 2024 at 1pm PT What can you ask in this AMA? How do we work with REST APIs? What SDKs are available for app development? How should we get started with Splunk UI development? What are some best practices to maintain & evolve Splunk Apps? ... View more

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated Search for Amazon S3 (FS-S3) helps you do just that. It lets you search and analyze historical or archival data directly in your Amazon S3 buckets without ingesting it into Splunk first. The result? You save on storage costs, shorten time-to-detection, and maintain tighter compliance. Key Benefits Reduced Storage Costs: Keep data where it lives in cost-effective Amazon S3 and query it on-demand—minimizing data ingestion and lowering overall storage expenses. Improved Time-to-Detection: Access and investigate historical data directly in Amazon S3 without rehydrating or moving it. Enhanced Compliance: Keep data in its original location to maintain compliance and streamline governance, only searching it when needed. See Federated Search for Amazon S3 in Action Ready to learn how this transformative capability works? Watch our new video and learn how to integrate Federated Search for Amazon S3 into your existing workflows. Additional Resources Check out the Federated Search for S3 Tech Brief for an in-depth look at technical features. Explore our webinar recording for a guided setup walkthrough and a live demo. Dive into this blog post to learn how to get started with key compliance use cases. Get Started Today Federated Search for Amazon S3 is generally available on the Splunk Cloud Platform and requires a Data Scan Units license for your Splunk Cloud stack. Contact your Splunk sales representative to start using FS-S3 today.  ... View more

Modern business operations are supported by data compliance. As regulations evolve, organizations must continuously adapt their strategies to ensure compliance without sacrificing the speed or accuracy of their analytics.  At Splunk, we help you meet challenges and turn compliance requirements into opportunities for innovation. Two new Splunk Lantern articles showcase how Federated Search for Amazon S3 (FS-S3) can enhance your compliance strategy by unlocking deeper insights, streamlining workflows, and reducing risk. Let’s explore these use cases designed to empower your compliance efforts. Use Case 1: Filtering, Enriching, and Retrieving Data from Amazon S3 with FS-S3 When your organization stores massive volumes of data in Amazon S3, retrieving what you need can feel daunting and expensive. Federated Search for Amazon S3 takes the storage and costs out of this process, enabling you to: Filter and route data directly to Splunk Cloud Platform and Amazon S3 without duplicating it into your environment. Seamlessly retrieve raw data while maintaining cost efficiency and compliance with storage policies. Read how to use FS-S3 to filter and route data, enrich it with Splunk Edge Processor, and extract relevant data from S3. 👉 Dive into the full article Use Case 2: Sending Masked PII Data to Splunk and Routing Unmasked Data to FS-S3 Handling sensitive data, like Personally Identifiable Information (PII), is a delicate balance of protecting privacy while ensuring operational workflows remain uninterrupted. This use case explores how Splunk’s FS-S3 can help you: Mask sensitive data at the source and send it to the Splunk platform for compliance reporting. Route unmasked data directly to Amazon S3 for federated search, enabling secure, targeted analysis when needed. Learn how an organization can mask and route PII data to optimize storage costs while maintaining compliance with their datasets. 👉 Explore the full article Why Federated Search for Amazon S3? Splunk’s Federated Search for Amazon S3 is a game-changer for compliance-focused teams, offering: Historical insights: Work directly with S3 data without time-consuming migrations. Security at scale: Keep sensitive data protected while maintaining compliance with regulations. Cost efficiency: Avoid unnecessary duplication of data and infrastructure. Whether navigating compliance regulations or striving to maximize your storage options, FS-S3 provides the flexibility and power you need to stay ahead. 👉 Take a look at our new video showcasing FS-S3 Start Unlocking New Possibilities Today Explore these use cases to see how Splunk’s FS-S3 can transform your approach to compliance and data management. Ready to get started? Federated Search for Amazon S3 requires a Data Scan Units license for your Splunk Cloud Platform stack. Contact your Splunk sales representative to learn more.  ... View more

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! 🎁 Whether you’re decking the halls or cozying up by the fire, we’ve got the perfect way to learn and connect this month. Check out the details below! 🌟  What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. SECURITY Office Hours | Splunk Threat Research Team: Security Content December 11, 2024 at 1pm PT This is an opportunity to directly ask members of the Splunk Threat Research Team your questions, such as... What are the latest security content updates from the Splunk Threat Research Team? What are the best practices for accessing, implementing, and using the team’s security content? What tips and tricks can help leverage Splunk Attack Range, Contentctl, and other resources developed by the Splunk Threat Research Team? Any other questions about the team’s content and resources! OBSERVABILITY Office Hours | Kubernetes Observability December 10, 2024 at 1pm PT What can you ask in this AMA? How do I use and customize Kubernetes navigators? What are best practices for optimizing Kubernetes alerts and troubleshooting workflows? Is there a way to view Kubernetes logs correlated with metrics? How do I review Pod status? How do I monitor Kubernetes resource limits? Anything else you’d like to learn! PLATFORM Office Hours | Awesome Admins: Running a Healthy Splunk Platform Environment December 12, 2024 at 1pm PT What can you ask in this AMA? What should I be looking at as a Splunk Cloud or Splunk Enterprise Admin, and why? What are some best practices for using workload management? How can I set up a scalable architecture? What are some best practices for monitoring system health with the Cloud Monitoring Console? What are some tips for managing and balancing disaster recovery? Any best practices for managing large numbers of users? Which admin tasks should I be streamlining with ACS? Anything else you'd like to learn! ... View more

We’re excited to introduce two powerful new search features, now generally available for Splunk Cloud Platform customers globally. Federated Search for Amazon S3 and the Splunk AI Assistant for SPL app are Splunk’s latest innovations to enhance search functionality, streamline data access, and drive more effective insights.  Let’s dive in! Federated Search for Amazon S3  Federated Search for Amazon S3 lets you search data stored in Amazon S3 directly from Splunk Cloud Platform without the need to ingest it first. You can now access large amounts of historical data cost-effectively and efficiently, making it easier to gain insights from your data faster. Key Benefits Reduced Storage Costs: Instead of ingesting all your data into Splunk, Federated Search lets you access data stored in Amazon S3 directly.This enables you to save significantly on storage costs by keeping your data in cost-effective Amazon S3 buckets while still allowing Splunk to query it.  Improved Time-to-Detection: Perform investigations directly on historical data stored in Amazon S3, without the time-consuming process of rehydrating or transferring it into Splunk. This allows for quicker detection and response, especially for archival or low-value data that may not need to be stored in Splunk continuously. Enhanced Compliance: Federated Search lets you keep your data where it is for investigations that require as-needed access to historical, archival, or low-value data and achieve better control over compliance and security.  Additional Resources Review the Federated Search for S3 Tech Brief to learn more. Watch this webinar recording to see how these features can transform your Splunk workflows. Learn how to set up Federated Search for Amazon S3, when to use it, and experience a live demo.  Take a look at this Lantern article to learn how to use Federated Search for Amazon S3 with Edge Processor Ready to get started? Federated Search for Amazon S3 requires a Data Scan Units license for your Splunk Cloud Platform stack. Contact your Splunk sales representative to learn more.  Splunk AI Assistant for SPL App The Splunk AI Assistant for SPL app allows you to generate and explain Splunk Search Processing Language (SPL) queries using natural language. Leverage the power of generative AI to write, learn, and understand SPL more efficiently. New to Splunk? You can now onboard and learn Splunk quickly while reducing the burden on Splunk Admins to answer questions. Experienced user? You can get a head start by leveraging the power of generative AI to get your job done even faster.  Key Features (watch it in action) Quickly generate SPL from natural language: The AI Assistant translates your natural language prompts into working SPL queries, drastically reducing the time needed to write queries.  Understand SPL with ease: Struggling to understand an SPL query? Break it down into easy steps with a detailed explanation of how the query works, what it does, and the results it generates. Interactive help with Splunk Docs integration: Ask questions and explain concepts about SPL features and concepts directly in the app, with responses powered by AI and Splunk Docs integration. Ready to get started? Simply complete the user agreement here to get provisioned for the app, then head to Splunkbase to download the app and install it on your activated cloud stack. Please reach out to mlsupport@splunk.com with any questions or feedback. Upcoming Search Events Check out the event below and register now to secure your spot! Ask the experts Office Hours: Splunk Search & New SPL Innovations | Wed, Nov 21, 2024 at 1pm PT: Ask the Experts in this special session where experts will begin by showcasing the latest innovations in search. Join us to ask questions and get live, personalized guidance from technical Splunk experts. Tech Talk: Generative AI for SPL - Faster Results| Tues, Oct 29, 2024 at 11am PT: Join this technical deep dive webinar to learn about Splunk’s differentiating approach to GenAI, get a technical review of the LLM under the hood, watch a live demo of the AI Assistant, and learn how to activate it. Happy Splunking! The Splunk Search Team ... View more

👻 Check out the bewitching Community Office Hours, Tech Talks, and Webinars we’ve conjured up for October below—no tricks, just treats! 🕸️🕷️    What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you!   What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource.   SECURITY Tech Talks | What's New with SOAR 6.3 October 2, 2024 at 11am PT Join this Tech Talk to see what Splunk SOAR is delivering in version 6.3. During this session, the team will provide a deep dive into new features like end-user prompts, FedRAMP certification, and integrations with Splunk Enterprise Security to help empower your SOC. Office Hours | Risk-Based Alerting October 2, 2024 at 1pm PT This is your opportunity to ask questions related to your specific Splunk Risk-Based Alerting challenge or use case, including: Quick guidance set up the foundational and get started with RBA Essential steps of implementing RBA Best practices for proper creation of risk rules, modifiers, etc. Troubleshooting and optimizing your environment for successful implementation Anything else you’d like to learn! Office Hours | SOAR October 9, 2024 at 1pm PT This is your opportunity to ask questions related to your Specific Splunk SOAR needs and use cases, including: New features from our recent 6.3 release SOAR 6.3 and Enterprise Security 8.0 integrations and the unified TDIR workflow Using SOAR and Attack Analyzer together Best practices for developing playbooks, workbooks and process workflows SOAR Apps recommendations Automatic incident response, Automating threat hunting, penetration testing, etc. Success measurement Anything else you'd like to learn!  Generative AI for SPL -- Faster Results Tuesday, October 29, 2024 at 11AM PT See how with AI Assistant more users in your organization can get the full value of Splunk insights and lessen the burden on your administrators.   OBSERVABILITY Tech Talks | Experience the Impact of Synthetic Monitoring at Splunk October 1, 2024 at 11am PT Join Splunk’s Growth Engineering team in their third Tech Talk as they discuss their adoption of Splunk Synthetic Monitoring to gain visibility across website pages, track core web vitals, and evaluate API performance across both traditional monolithic and multi-cloud environments. And showcase how comprehensive visibility was essential to minimizing downtime costs, improving customer experience, and furthering our digital resilience. Office Hours | Digital Experience Monitoring (RUM + Synthetics) October 23, 2024 at 1pm PT This is your opportunity to ask questions related to your specific Digital Experience Management (DEM) questions with Splunk RUM and Splunk Synthetics, including: Gaining a full view of the end-user experience, through features like Session Replay Running front-end/back-end investigations to pinpoint errors Running synthetics tests to proactively predict app and website performance Anything else you’d like to learn! ... View more

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This post will be updated monthly so be sure to bookmark it and check back for new events! Keep in mind, that these events are all leading up to .conf24 just around the corner. Make sure to register now to secure your spot! What are Community Office Hours? Community Offce Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on various topics. Whether you're just starting your journey with Splunk, or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, a question you’re eager to get answered by Splunk experts, exploring new use cases, or just want to sit and listen in, Community Office Hours is for you! What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. PLATFORM Office Hours | Getting Data In: Platform May 8, 2024 at 1pm PT This is your opportunity to ask questions related to your specific GDI challenge or use case, including: How to onboard common data sources (AWS, Azure, Windows, *nix, etc.) Using forwarders Apps and add-ons to get data in Processing data with Edge Processor, Ingest Processor, and Ingest Actions Archiving your data Anything else you’d like to learn! Office Hours | Getting Data In: Forwarders May 22, 2024 at 1pm PT This is your opportunity to ask questions related to getting data into Splunk Platform using forwarders, including: Universal Forwarder (UF) or heavy forwarder (HF) deployment/configuration Troubleshooting forwarder connectivity issues, blocked queues, etc. Improving forwarder performance Anything else you’d like to learn!   SECURITY Tech Talk | Detecting Remote Code Executions With the Splunk Threat Research Team May 22, 2024 at 11am PT To support defenders against remote code execution (RCE) attacks, the Splunk Threat Research Team regularly creates new out-of-the-box security content for use in Splunk Enterprise Security.  Join this Tech Talk to learn more from Michael Haag, Principal Threat Researcher, who will provide: An overview of the latest security content the team has developed to defend against RCEs Best practices for implementing and using this content A walkthrough of the detection engineering process the Splunk Threat Research Team follows to create security content for defending against CVEs Office Hours | Splunk Threat Research Team: Detecting Remote Code Executions June 5, 2024 at 1pm PT This is your opportunity to ask questions about using the latest security content developed by the Splunk Threat Research Team to detect RCEs, including: How to find and access security content designed to help defend against RCEs Best practices and practical tips for using this content Specific questions about recently released content for detecting RCEs impacting Jenkins servers, Ivanti VPN devices, and Confluence Data Center and Server Anything else you'd like to learn!   OBSERVABILITY Webinar | How to Build a Leading Observability Practice May 2, 2024 at 10am PT Join observability leaders at Splunk for a lively discussion on what it takes to build a leading observability practice. From boots on the ground experience working with our customers, we’ll share how high-performing engineering and ITOps teams are using observability to improve their digital resilience, and how Splunk can help you achieve: Unified visibility across any environment and any stack Earlier detection & investigation of business-impacting issues And better control of your data and costs Tech Talk | More Ways to Control Your Costs with Archived Metrics May 14, 2024 at 11am PT Join us in this Tech Talk and learn how to redirect and store metrics data into a low-cost store with Metrics Pipeline Management’s newly launched tier “Archived Metrics”. Now, you get to ingest and keep all your metrics data, even those in large volumes, to gain more control over your costs and optimize your data storage utilization. Topics covered include: What is Metrics Pipeline Management and its newly released “Archived Metrics” tier How to dynamically store your high-volume metrics in cold low-cost storage How to re-hydrate your metric data using rule-based re-routing Webinar | Bringing Observability to the  Splunk Platform May 22, 2024 at 10am PT In this webinar, learn all about observability, its benefits, and how easy it is to adopt it! From microservices and Kubernetes monitoring to real-time analytics and cost-effective troubleshooting, discover all the use cases you can unlock by integrating observability with Splunk platform. Join us and find out what you’re missing out on by not combining Splunk Platform with Splunk Observability Cloud! Accelerate root cause analysis by adding critical real-time context to your logs Get direct access to purpose-built applications, infrastructure, and end-user monitoring solutions for faster troubleshooting Avoid tool sprawl and silos by combining all your data and reporting in one place Tech Talk | Built-In SLO Management to Bridge the Gap Between Service & Business Performance  May 29, 2024 at 11am PT Join us to learn more about how you can leverage SLOs and the new built-in capabilities in Observability Cloud, including the SLO homepage, SLOs in dashboards, and SLO calendar windows to bridge the gap between service and business performance. Learn how to: Create and visualize SLOs in dashboards to monitor your critical user journeys Tailor SLOs with calendar and rolling windows and alert on SLOs with Observability Cloud detectors Leverage auto-suggested thresholds and ML-generated smart suggestions to create smarter SLOs ... View more

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post will be updated monthly so be sure to bookmark it and check back for new events! What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where participants can ask questions and engage with technical Splunk experts on a variety of topics. Whether you're just starting your journey with Splunk or looking for best practices to take your deployment to the next level, Community Office Hours provides a safe and open environment for you to get help. If you have an issue you can’t seem to resolve, have a question you’re eager to get answered by Splunk experts, are exploring new use cases, or just want to sit and listen in, Community Office Hours is for you! What are Tech Talks? Tech Talks are designed to accelerate adoption and ensure your success. In these engaging 60-minute sessions, we dive deep into best practices, share valuable insights, and explore additional use cases to expand your knowledge and proficiency with our products. Whether you're looking to optimize your workflows, discover new functionalities, or troubleshoot challenges, Tech Talks is your go-to resource. SECURITY Office Hours | Security: Automated Threat Analysis with Splunk Attack Analyzer April 17, 2024 at 1pm PT This Community Office Hours session with Neal Iyer, Sr. Principal Product Manager, will be focused on automated threat analysis with Splunk Attack Analyzer.  Join us for an office hours session to ask questions about how automated threat analysis can enhance your existing security workflows, including: Practical applications and common use cases How Splunk Attack Analyzer integrates with other Splunk security solutions  Anything else you'd like to learn! Tech Talk | How to Uplevel Your Threat Hunting with the PEAK Framework and Splunk April 24, 2024 at 11am PT This tech talk shares how the Splunk Threat Hunting team seamlessly integrated the PEAK Threat Hunting Framework into their workflow while leveraging Splunk. Explore Splunk’s end-to-end processes with tips and tricks to unleash a pipeline of hunters and turn the PEAK Threat Hunting framework from a concept into a powerful tool in your organization. Join Splunk threat hunters Sydney Marrone and Robin Burkett to learn about:   The PEAK threat-hunting framework  How you can customize PEAK for your environment  How to enable your SOC analysts to be successful threat hunters Real-world examples of PEAK hunt types for actionable insights   OBSERVABILITY Office Hours | Observability: APM: Session 2 April 10, 2024 at 1pm PT This is your opportunity to ask questions about your current Observability APM challenge or use case, including: Sending traces to APM Tracking service performance with dashboards Setting up deployment environments AutoDetect detectors Enabling Database Query Performance Setting up business workflows Implementing high-value features (Tag Spotlight, Trace View, Service Map) Anything else you'd like to learn! Tech Talk | Extending Observability Content to Splunk Cloud April 23, 2024 at 11am PT Learn how to leverage Splunk Observability data in your Splunk Cloud Platform! Improve your Splunk platform’s capabilities with Splunk Observability Cloud Accelerate root cause analysis with Related Content in Splunk Cloud Platform Enhance troubleshooting with Splunk Infrastructure Monitoring and Splunk Application Performance Monitoring Office Hours | Observability: Usage and Data Control April 24, 2024 at 1pm PT This is your opportunity to ask questions about your current Observability Usage and Data Control challenge or use case. Including: Metrics Pipeline Management in Splunk Infrastructure Monitoring (IM) Metric Cardinality Aggregation Rules Impact and benefits of data dropping Anything else you'd like to learn! ... View more