Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently.
We also host Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.
This month we’re sharing all the details of a brand new Splunkbase app which helps you discover use cases in Lantern’s Use Case Explorer for the Splunk Platform. We’re also highlighting a batch of new Splunk Edge Processor articles that help new users learn how it works, and help more experienced users get even more value from it. As usual, we’ve also got links to every new article that we published over the month of February.
Use Case Explorer App
We’re excited to announce the launch of a brand new app that makes it easier than ever for you to work with the Use Case Explorer for the Splunk Platform - the Use Case Explorer App for Splunk.
This app searches your Splunk data sources and recommends use cases you can use right away, using the 350 different procedures you can find within the Use Case Explorer for the Splunk Platform. It’s a great tool for identifying new ways you can get more value out of your Splunk implementation, and it links you to the relevant articles in Lantern so you can get started easily.
The Use Case Explorer content is designed to help you achieve your Security and IT Modernization goals - even if you're not using Splunk's premium security and observability products. (If you are using these products, you can check out the guidance for them within the Use Case Explorer for Security and Use Case Explorer for Observability.) The Use Case Explorer also contains a wide range of industry-specific use cases.
Check out the app today, and don’t hesitate to let us know how it’s helped you by dropping a comment below!
Doing More with Splunk Edge Processor
This month the Lantern team has been working with experts from all across Splunk to publish new articles that highlight some of the key capabilities in Splunk Edge Processor. Here’s more info on three that we’ve published this month:
- Reducing Windows security event log volume with Splunk Edge Processor features a great video from the experts at Splunk Edu that shows you how Splunk Edge Processor can be used to help you better manage security event log volume.
- Converting logs into metrics with Edge Processor for beginners is a great place to get started if you’re new to how Edge Processor works. It shows you how to build metrics with dimensions so you can remove complexity from data, reduce resource consumption, improve data quality, and ultimately reduce mean time to identify problems.
- Finally, Enriching data via real-time threat detection with KV Store lookups in Edge Processor shows you how to utilize lookups to cross-reference threat intelligence data, which enhances your ability to detect and respond to cybersecurity threats in a timely and efficient manner.
We’re continuing to plan even more Edge Processor articles in the future, so drop a comment below if there are any tips you’d like to see, or use cases you’d like us to cover!
This Month’s New Articles
Here’s the rest of everything that’s new on Lantern, published over the month of February:
- Customizing JMX metric collection with OpenTelemetry
- Enriching data via real-time threat detection with KV Store lookups in Edge Processor
- Rigor to Synthetics Migration
- Migrating from Tenable LCE to Splunk Enterprise Security
- Splunk IT Service Intelligence Owner's Manual
- Checking for event time indexing
- Checking for KPI search success
- Maintaining service entities
- Maintaining adaptive thresholds
- Monitoring for KPI search lag
- Splunk User Behavior Analytics (UBA) Owner's Manual
- Tuning anomaly rules
- Checking for sizing adherence
- Patching for operating system security
- Cleaning up backup file directories
- Validating data source integrity
- Implementing a reingestion pipeline for AWS logs using Kinesis Data Firehose
- Using Amazon SageMaker to predict risk scores
We hope you’ve found this update helpful. Thanks for reading!
Kaye Chapman, Senior Lantern Content Specialist for Splunk Lantern
