Skip to main content

COLLECTION

Detection and Response

Collect data across multiple security layers and manage threats quickly. Provide comprehensive protection for your organization.

Endpoint

Pull in endpoint detections to jump start your detection and response workflows.

Network

Track lateral movement or monitor agentless endpoints, like internet of things or operational technology devices.

Splunk for Palo Alto Networks

Palo Alto Networks and Splunk have partnered to deliver an advanced security reporting and analysis tool. The collaboration delivers operational reporting as well as simplified and configurable dashboard views across Palo Alto Networks family of next-generation firewalls. Splunk for Palo Alto Networks leverages the data visibility provided by Palo Alto Networks's firewalls with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool. This app enables security analysts, administrators, and architects to correlate application and user activities across all network and security infrastructures from a real-time and historical perspective. Complicated incident analysis that previously consumed days of manual and error-prone data mining can now be completed in a fraction of the time, saving not only manpower but also enabling key enterprise security resources to focus on critical, time-sensitive investigations.

Platform: Splunk Enterprise, Splunk Cloud

Brian Torres-Gil

Email Security

See and contain email threats at patient zero before the next user is compromised.

Mark test scheduled release 3

This app was created first, then set for a scheduled release on the hosting page

Platform: Splunk Enterprise

Server/Cloud Workload Monitoring

Keep an eye on containers and serverless functions in your cloud infrastructure.

Splunk Supported

Splunk App for AWS

The Splunk App for AWS gives you critical operational and security insight into your Amazon Web Services account. The app includes: * A pre-built knowledge base of dashboards, reports, and alerts that deliver real-time visibility into your environment. * Easy-to-configure data inputs for your Config, CloudTrail, CloudWatch, VPC Flow Logs, Billing, and S3 data. * A logical topology dashboard that displays your entire AWS infrastructure to help you optimize resources and detect problems. * CIM-compliant fields and tags so that you can integrate your AWS data with your other infrastructure and security data sources.

Platform: Splunk Enterprise, Splunk Cloud

Identity

Link attacks to users and proactively block attacks from potentially compromised accounts.

Splunk App for PingFederate

The Splunk App for PingFederate gathers performance metrics from all aspects of PingFederate and its underlying infrastructure, and presents the data in a series of operational dashboards covering SSO transactions, system health, service reports, and long-term trend analysis.

Platform: Splunk Enterprise