Hi @hikan  You are right in that the download for Splunk Enterprise Security on Splunkbase is restricted, only users which have been assigned an ES license are added to the entitlement for downloading this app.  Please reach out to your Splunk account team who should be able to arrange the appropriate license & access for you to conduct a proof-of-concept of Enterprise Security. If you do not have, or do not know your account team then I would put a request in via https://www.splunk.com/en_us/talk-to-sales.html In the meantime it might be worth looking at the the Security Essentials and the ES Content Update Splunkbase apps or the http://research.splunk.com/ website. 🌟 Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing ... View more