What is Splunk SOAR (Formerly Splunk Phantom)?
You’ve had an SIEM for a while, it’s doing well, and now you want to take that to the next level. That often means time
Michael Simko
Splunk Support: Where to Find Assistance
In this post, we’ll walk through the best places to find the proper assistance based on what is required. Several options are available for support,
Using the dedup Command
What is the Splunk dedup Command? The Splunk dedup command, short for “deduplication”, is an SPL command that eliminates duplicate values in fields, thereby reducing
Using the spath Command
Your dilemma: You have XML or JSON data indexed in Splunk as standard event-type data. Sure, you’d prefer to have brought it in as an
Estimating Splunk License Sizes
What is a Splunk License? A Splunk license is a file that houses information about your license entitlement. This tells you what your abilities and
Splunk MLTK: What It Is And How It Works
What if there was a tool you could use to automate the time-consuming and nearly impossible parts of your job as a Splunk administrator? There