Splunk adds more functionality to unified security and observability platform

Splunk, the cybersecurity and observability provider, has enhanced its unified security and observability platform to help build safer and more resilient digital enterprises. With the Splunk platform, organisations can unify, simplify and modernise their workflows and business.

Splunk Mission Control and Splunk Observability Cloud have been upgraded. The enhanced Splunk Mission Control lets security operations centres (SOCs) detect, investigate and respond to threats from a modern and unified work surface.

Mission Control brings together Splunk’s security technologies to help customers take control of their detection, investigation and response processes. Splunk’s security offerings include security analytics (Splunk Enterprise Security), automation and orchestration (Splunk SOAR), and threat intelligence capabilities. SOAR stands for security orchestration, automation and response.

Splunk Mission Control also offers simplified security workflows with processes codified into response templates. With Splunk Mission Control, security teams can focus on mission-critical objectives, and adopt more proactive, nimble security operations. Splunk Mission Control is available to Splunk Enterprise Security Cloud customers based on technical and regional requirements. 

With Splunk’s new innovations to the Observability Cloud, ITOps and DevOps teams can troubleshoot faster with increased visibility and a more unified approach to incident response. Splunk Incident Intelligence empowers teams to increase on-call team efficiency so they can diagnose, remediate, and restore services before their customers are impacted. 

New Autodetect capabilities from Splunk APM uses machine learning to reduce manual effort and improve the accuracy of alerts, while IM Network Explorer enables teams to easily monitor and assess their cloud network health and resolve issues faster. APM stands for application performance monitoring, while IM stands for infrastructure monitoring. 

All Splunk Observability Cloud innovations are now generally available.

Splunk Edge Processor 

Now generally available, Splunk Edge Processor provides Splunk Cloud Platform customers with increased visibility into and control over streaming data before it leaves their network. With Edge Processor, customers can filter, mask and route data, experiencing improved efficiency in data transformation as powered by the next generation of Splunk Search Processing Language (SPL2).

“GoTo sees Splunk Mission Control as a solution that can take its security operation to the next level,” said Michael Rennie, Technical Manager, Security Operations at GoTo. “The more we can centralise our SOAR, threat intelligence and ticketing system data in Mission Control, the more time we can save."

“Splunk gives us full visibility into our data, helping us understand and work with it as it goes through the whole company,” said Randy Herold, CISO, ManpowerGroup. 

“We don’t just use data; we build on and off of it to improve our day-to-day operations, simplify our environment and make better decisions.”

“Cyberattacks are growing more frequent and complex, but organisations still need to drive resilience as they continue their digital transformation,” said Duncan Brown, IDC Group VP of European Software Research. 

“Splunk’s innovations in unified security and observability aid organisations in resolving this conundrum, by increasing digital resilience through advanced security analytics and better visibility across the tech stack. A holistic approach to security and observability is essential for any digital enterprise.”

“Organisations must focus on digital transformation and deliver value for their customers, but their teams are constantly facing cybersecurity threats, IT system stressors and other adverse events,” said Tom Casey, Senior VP, Products & Technology, Splunk. 

“Splunk’s latest product innovations will help our customers mitigate these challenges. Splunk’s integrated security and observability solutions help security operations, IT operations and DevOps teams work smarter and better together to achieve this transformation and build digital resilience.”