Splunk Enterprise Security
Overview
Details
• Continuously Monitor: get a clear picture of security posture using pre-defined dashboards, key security and performance indicators, static & dynamic thresholds, and trending indicators
• Prioritize and Act: optimize incident response workflows with alerts, centralized logs, and pre-defined reports and correlations
• Conduct Rapid Investigations: use ad-hoc search and static, dynamic and visual correlations to detect malicious activities
• Handle Multi-step Investigations: trace activities associated with compromised systems and apply the kill-chain methodology to see the attack lifecycle
Splunk ES is a premium security solution requiring a paid license
Splunk Enterprise Security (ES) streamlines all aspects of security operations for organizations of all sizes and levels of expertise. Splunk ES provides insight from data generated from network, endpoint, access, malware, vulnerability and identity technologies to correlate using pre-defined rules or via ad-hoc searching.
Whether deployed for continuous monitoring, rapid incident response, a security operations center (SOC), or for executives who need a view of business risk, Splunk ES delivers the flexibility to customize correlation searches, alerts, reports and dashboards to fit specific needs.
Splunk ES provides organizations the ability to:
• Optimize security operations through faster response times
• Improve security posture wiht end-to-end visibility across all machine data
• Increase detection capabilities using analytics-driven security
• Make better informed decisions by leveraging threat intelligence
For more information see the Splunk ES Home Page and Splunk Enterprise Security Documentation.
Release Notes
Version: 4.1.2
Splunk Enterprise Security 4.1.2 Copyright (C) 2005-2016 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/4.1.2/RN/Enhancements
Sept. 26, 2016, 4:50 p.m.
Platform Independent
6.5, 6.4, 6.3
Version: 4.0.4
Splunk Enterprise Security 4.0.4 Copyright (C) 2005-2016 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/4.0.4/RN/Enhancements
Sept. 26, 2016, 4:49 p.m.
Platform Independent
6.5, 6.4, 6.3
Version: 3.3.3
Splunk Enterprise Security 3.3.3 Copyright (C) 2005-2016 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/3.3.3/RN/Enhancements
March 14, 2016, 10:08 p.m.
Platform Independent
6.4, 6.3, 6.2
Version: 3.2.2
Splunk App for Enterprise Security 3.2.2 Copyright (C) 2005-2015 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/3.2.2/RN/Enhancements
March 31, 2015, 3:26 p.m.
Platform Independent
6.2
Version: 3.1.1
Splunk App for Enterprise Security 3.1.1 Copyright (C) 2005-2014 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/3.1.1/RN/Enhancements
July 28, 2014, 4:07 p.m.
Platform Independent
6.2, 6.1
Version: 3.0.1
Splunk App for Enterprise Security 3.0.1 Copyright (C) 2005-2014 Splunk Inc. All rights reserved. For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/3.0.1
April 7, 2014, 9:52 p.m.
Platform Independent
6.1, 6.0
Version
Category
Product Support
Content Type
Splunk Versions
Licensing
Splunk Software License AgreementPlatforms
Built by
Subscribe Share