Splunk Mission Control

What is Mission Control?

kavitav
Splunk Employee
Splunk Employee

Mission Control (MC), currently in Preview, is a security operations application from Splunk Security. When all features are released, it will unify capabilities from Splunk Core, Enterprise Security, SOAR, and Threat Intelligence Management. 

This release of Mission Control, known as “Preview 1”, provides the initial infrastructure for the app, the ingestion framework to move ES incidents into MC, and the framework for response capabilities via a feature called Response Templates.  It is a great way to see how the product is shaping up and what the fundamentals of Mission Control look like! Check out the docs here for more info! https://docs.splunk.com/Documentation/MC/Preview/

 

Note that the app is currently in an early release preview. 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...