Skip to content
Forums
Product Reviews
SIEM and SOAR Revie...
Splunk Enterprise S...
 
Notifications
Clear all

Splunk Enterprise Security Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Splunk Enterprise Security.
RSS
Page 4 / 12

Showcase: Automated enrichment of notables with VirusTotal and Shodan data.

Last post by GraceJ, 2 months ago

Posts: 5
Views: 34


Troubleshooting: ES not pulling in certain Windows security event IDs.

Last post by Mike I., 2 months ago

Posts: 8
Views: 28


Unpopular opinion: Splunk's training for ES is mandatory, and that's a red flag.

Last post by data_pipeline_rookie_43, 2 months ago

Posts: 13
Views: 27


How do I get started writing my own correlation searches? Any good templates?

Last post by benjislack, 2 months ago

Posts: 8
Views: 35


Unpopular opinion: For most companies, a well-tuned Splunk + custom app is better than ES.

Last post by dant, 2 months ago

Posts: 23
Views: 104


Help: How to archive old notable events without losing audit trail?

Last post by alexg2, 2 months ago

Posts: 14
Views: 24


Check out this query to find lateral movement using ES's Authentication data model.

Last post by freddiem, 2 months ago

Posts: 4
Views: 27


Results after 6 months: ES cost us 2.5 FTE to maintain, was it worth it?

Last post by elliotv, 2 months ago

Posts: 3
Views: 77


Splunk ES alternatives that are not Elastic or Sentinel?

Last post by Mark C., 2 months ago

Posts: 1
Views: 36


Beginner mistake I made: Not defining asset criticality early. Do it first.

Last post by data_pipeline_newbie, 2 months ago

Posts: 9
Views: 29


Page 4 / 12
Share:
Share
Tweet
Share
Share