Splunk Data Models & CIM

In this post, you will find out what Splunk data models and CIM (Common Information Model) are and why they hold…

Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 1

Kafka + S3: Long-term searchable/queryable data retention

Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 2

Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 3

Syslog Data Collection (SC4S) for Splunk and Custom Inputs

Ingesting Syslog data to Kafka

When working with event data analytics, especially for security purposes (i.e. SIEM), syslog becomes an…

Ingesting Event Data from Splunk Forwarder/SC4S to Kafka

Splunk Connect for Syslog (SC4S): Installation, Usage & Implementations

Risk-Based Alerting (RBA) with Splunk Enterprise Security