What is SPLUNK?
Splunk is a software is used for extracting , monitoring, searching and analyzing the machine generated data gathered from the websites, applications, sensors, device or any data can be created. The different type of log files and store data can monitor and read in indexers. This tools are allows to visualize data in different form of dashboards. Splunk can handle big data effectively with performance is no decrease. Splunk can collect the data in real time from multiple systems. Splunk can analyze the system performance

Why we need splunk?
•In a dashboard can be enhanced from GUI and real time visibility.
•Splunk is a best suited tool for root cause analysis
•It reduces the troubleshooting and resolving time
•It can allows to generating a graphs, alert and dashboards.
•Splunk can allow to troubleshoot when any condition is failure, it can improved the performance.
•It can allows to accepts the any data like as .CSV( comma-separated values), json(JavaScript Object Notation),log format,……etc.

Features of Splunk?
•Development and Testing
•To build Real-time data application
•Generate ROI(Return on Investment) faster
•Reporting with real-time architecture and statics

Splunk Products?
Splunk can be three types of products.
1.Splunk Enterprise
2.Splunk Light
3.Splunk Cloud

​

​Splunk SIEM Security Topics

• Validating the enterprise security model

• Creating and tuning correlation searches

• Implementing the add-ons with Splunk

• Identity and look-up management

• Framework for threat intelligence

• Introduction to Splunk Enterprise Security

• Investigation and monitoring events

• Security intelligence and forensics

• Enterprise security deployment with Splunk