Splunk Enterprise Security

Overview

Details

Splunk Enterprise Security is the nerve center of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk. ES helps teams gain organization-wide visibility and security intelligence for continuous monitoring, incident response, SOC operations, and providing executives a window into business risk.

• Continuously monitor: clearly visualize security posture with dashboards, key security indicators, static & dynamic thresholds, and trending
• Prioritize and act: optimize, centralize, and automate incident response workflows with alerts, centralized logs, and pre-defined reports and correlations
• Conduct rapid investigations: use ad-hoc search and correlations to detect malicious activities
• Handle multi-step investigations: trace activities associated with compromised systems and apply the kill-chain methodology to see the attack lifecycle

Splunk ES is a premium security solution requiring a paid license.

Splunk Enterprise Security (ES) streamlines all aspects of security operations for organizations of all sizes and levels of expertise. Splunk ES provides insight from data generated from network, endpoint, access, malware, vulnerability and identity technologies to correlate using pre-defined rules or via ad-hoc searching.

Whether deployed for continuous monitoring, rapid incident response, a security operations center (SOC), or for executives who need a view of business risk, Splunk ES delivers the flexibility to customize correlation searches, alerts, reports and dashboards to fit specific needs.

Splunk ES provides organizations the ability to:
• Optimize security operations through faster response times
• Improve security posture wiht end-to-end visibility across all machine data
• Increase detection capabilities using analytics-driven security
• Make better informed decisions by leveraging threat intelligence

For more information see the Splunk ES Home Page and Splunk Enterprise Security Documentation.

Release Notes

Version 6.2.0

May 30, 2020

Version 6.1.1

April 15, 2020

Version 6.0.2

April 8, 2020

Version 6.0.1

Jan. 29, 2020

Version 6.1.0

Jan. 23, 2020

This is a Python 3 only Release

Version 6.0

Oct. 25, 2019

Version 5.3.1

July 24, 2019

Version 5.3.0

March 28, 2019

Version 5.2.2

Jan. 3, 2019

Splunk Enterprise Security 5.2.2 Copyright (C) 2005-2019 Splunk Inc. All rights reserved.

For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/5.2.2/RN/FixedIssues

Version 5.1.1

Sept. 17, 2018

Version 5.0.1

June 15, 2018

Version 4.7.6

April 9, 2018

Splunk Enterprise Security 4.7.6 Copyright (C) 2005-2017 Splunk Inc. All rights reserved.

For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/4.7.6/RN/FixedIssues

Version 4.5.3

May 19, 2017

Splunk Enterprise Security 4.5.3 Copyright (C) 2005-2017 Splunk Inc. All rights reserved.

For the Release Notes, What's New, and Getting Started documentation for this release see: http://docs.splunk.com/Documentation/ES/4.5.3/RN/Enhancements

Share Subscribe LOGIN TO DOWNLOAD

Version

Built by

Splunk Inc.

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

App Contents: Inputs