Splunk IT Service Intelligence
Splunk IT Service Intelligence is a monitoring solution that offers an innovative, machine-data driven approach to provide comprehensive visibility into operational health and key performance indicators of IT services and the infrastructure that underpins it. Use Splunk IT Service Intelligence to: Define relevant service relationships to quickly visualize and understand dependencies and potential performance impact Present real-time insights into service health against defined performance indicators to driven operational and business decisions Organize and correlate relevant metrics/events into ‘swim lanes’ to speed up investigations and diagnosis Run pre-defined correlation searches against learned indicators to generate notable events Pre-program static thresholds and assign weights to define severity levels Employ machine learning to baseline normal operational patterns and adapt thresholds to changing behavior in real-time
Splunk certified
Prevoty AMP
The Prevoty Application Monitoring and Protection (AMP) for Splunk app gives enterprises visibility into attacks on their production applications and the ability for the applications to automatically protect themselves. Users of Splunk® Enterprise can now identify vulnerabilities being exploited by hackers and enable automatic neutralization of the attacks. With Prevoty AMP surfacing attack data from applications into a custom Splunk dashboard, Splunk® Enterprise enables organizations to correlate, visualize and understand valuable operational intelligence about which of their production applications are being targeted by hackers, including the “who, what, where and when” of the attacks. This security intelligence can then be used to selectively enable Prevoty AMP’s automatic application protection capabilities, reducing the cost of remediating vulnerabilities and providing valuable data for forensic and root cause analysis.
Splunk 5.x App for Microsoft Windows
The Splunk App for Microsoft Windows ONLY works on Splunk 5.x systems. For similar functionality on Splunk 6 and later editions, please use the Splunk App for Windows Infrastructure: http://apps.splunk.com/app/1680/ The Splunk App for Windows provides examples of pre-built data inputs, searches, reports, alerts, and dashboards for Windows server and desktop management. You can monitor, manage, and troubleshoot Windows operating systems from one place. Included are scripted inputs for CPU, disk, I/O, memory, log, configuration, and user data, plus a web-based setup UI for indexing Windows Events Logs.
