In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes explode, security and IT teams are often forced to choose between the high cost of ingesting everything into a central platform or the operational risk of losing visibility into critical logs. We are excited to announce the launch of the Gigamon Federated Search app for Splunk. This integration delivers unified, cost-effective insights by turning raw network traffic into high-value actionable telemetry that can be accessed where it resides.
Solving the Data Distribution Dilemma
The primary value of this app lies in its ability to manage and optimize Gigamon network-derived telemetry while making strategic decisions that maximize data access and value. Not all data is created equal. Raw network traffic must be filtered, enriched, and optimized before it can deliver meaningful insights at scale. By leveraging AWS S3 or Azure Blob / Azure Data Lake as a strategic data store, organizations no longer have to decide which data is worth monitoring. They can maintain full visibility across their data ecosystem while meeting stringent PCI mandates at scale. Customers who leverage the new Gigamon app benefit from their data lake investments, effectively bringing Splunk closer to their entire data ecosystem with a seamless user experience including dashboards and reports viewable in a unified analytics plane.
Use Cases for Financial Services and Beyond
This app is specifically engineered to support financial services operations and PCI compliance through a tiered approach:
Near-term Monitoring: Achieve immediate visibility into PCI compliance requirements, such as detecting unencrypted traffic on in-scope networks. This addresses specific requirements like R1 1.2.6, which mandates the monitoring of vulnerable protocols like FTP and SMBv1, and R4 4.2.1, which requires verification of trusted certificates and TLS ciphers.
Medium-term Summaries: Generate weekly performance reports on credit card transaction processing to ensure efficiency and prevent lost revenue due to latency or system failures.
Long-term Compliance Reporting: Simplify quarterly encryption audits to satisfy PCI mandates, reducing audit friction and ensuring cryptographic cipher suites are documented and reviewed as required by PCI R-12.3.3.
How the Gigamon Federated Search App Works
The Gigamon Federated Search app is designed to provide a seamless, distributed data strategy with all necessary search and processing artifacts pre-built.
The solution combines intelligent data preparation with distributed search, ensuring that the right data is available in the right place at the right time.
Federated Data Access: The app utilizes Splunk’s Federated Search solution and SPL2 to query optimized datasets directly in AWS S3, bypassing unnecessary ingestion.
Pipeline Automation: It provides out-of-the-box data processing pipelines for Edge and Ingest Processors. These templates allow you to route optimized Gigamon network-derived telemetry to both Splunk and AWS S3 in a search-ready format.
Unified Dashboards: The app includes pre-built dashboards that bundle federated searches, allowing you to visualize datasets across your distributed environment as if they were local.
Driving the Future of Data Analytics
This partnership marks a new generation of applications built on the Splunk Platform, enabling a more efficient, AI-ready approach where high-fidelity network telemetry and distributed data can be analyzed together without tradeoffs. By bridging the gap between network-derived telemetry and Federated Search, we are helping customers turn distributed data into a strategic asset.
Ready to simplify how you access, manage, and act on distributed data? Download the Gigamon Federated Search app from Splunkbase today. Customers who are currently on version 10.4 Splunk Cloud deployment can start unlocking the full potential of their network telemetry.
... View more
