Detection and Response

Palo Alto Networks and Splunk have partnered to deliver an advanced security reporting and analysis tool. The collaboration delivers operational reporting as well as simplified and configurable dashboard views across Palo Alto Networks family of next-generation firewalls. Splunk for Palo Alto Networks leverages the data visibility provided by Palo Alto Networks's firewalls with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool. This app enables security analysts, administrators, and architects to correlate application and user activities across all network and security infrastructures from a real-time and historical perspective. Complicated incident analysis that previously consumed days of manual and error-prone data mining can now be completed in a fraction of the time, saving not only manpower but also enabling key enterprise security resources to focus on critical, time-sensitive investigations.

This app was created first, then set for a scheduled release on the hosting page

The Splunk App for AWS gives you critical operational and security insight into your Amazon Web Services account. The app includes: * A pre-built knowledge base of dashboards, reports, and alerts that deliver real-time visibility into your environment. * Easy-to-configure data inputs for your Config, CloudTrail, CloudWatch, VPC Flow Logs, Billing, and S3 data. * A logical topology dashboard that displays your entire AWS infrastructure to help you optimize resources and detect problems. * CIM-compliant fields and tags so that you can integrate your AWS data with your other infrastructure and security data sources.

The Splunk App for PingFederate gathers performance metrics from all aspects of PingFederate and its underlying infrastructure, and presents the data in a series of operational dashboards covering SSO transactions, system health, service reports, and long-term trend analysis.