Graphlens

GraphLens provides interactive, Neo4j-like relationship-graph exploration for data already stored in Splunk. The app enables visual entity relationship discovery through an interactive graph interface with node expansion, filtering, path finding, and drill-down to supporting events. GraphLens is an independent, third-party Splunk application that does not require, embed, or connect to Neo4j or any other external graph database. Splunk itself serves as the data store, search engine, security boundary, and application platform. GraphLens adds browser-side rendering and state management along with a small set of bounded, pre-approved searches. The app supports use cases including security investigation, Splunk knowledge-object lineage, logging and detection-use-case catalogues, application dependency mapping, and identity relationship exploration. It functions as a generic graph explorer rather than a single hard-coded use case.