Operations | Monitoring | ITSM | DevOps | Cloud

Latest Posts

Ryuk and Splunk Detections

Several weeks ago, my good friend Katie Nickels (Director of Intelligence at Red Canary extraordinaire) and I were chatting about Ransomware. She was super interested and passionate about some new uses of a ransomware variant named “Ryuk” (first detected in 2018 and named after a manga/anime character) [1]. I was, to be honest, much less interested. It turns out, as usual, Katie was right; this was a big deal (although as you will see, I’m right too… still dull stuff!).

Announcing Splunk Data Stream Processor 1.2

As data continues to explode across the enterprise, we are finding that it is becoming increasingly challenging for organizations to keep up. A recent Splunk report, "The Data Age is Here," found that 57% of companies interviewed expressed that the volume of data is growing faster than they can manage, with 47% bluntly saying they will fall behind when faced with rapid data volume growth.

Modernization Starts With Infrastructure

Today, every company is a software company and digital business is a core strategy for many organizations. To gain the much-needed agility and efficient scalability, companies in all verticals are modernizing their infrastructure by moving to hybrid, multicloud and cloud-native environments. Realizing that modern applications run on modern infrastructure, IT leaders are prioritizing infrastructure modernization initiatives.

Phishing Emails - Less Ocean, More Aquarium

Here at Splunk, when we discuss Splunk Phantom with customers we end up talking about phishing pretty frequently because it’s something like Olivia outlined in a recent blog post, "Between Two Alerts: Phishing Emails — Don’t Get Reeled In!", customers both encounter and talk to us about all the time. It makes a lot of sense — phishing is a super common issue that almost everyone deals with ad nauseum and it’s annoying to investigate.

Display a Persistent Banner Message with the New Global Banner

For years, Splunk has provided the ability to display dismissible Bulletin Messages. But what if you need to show a non-dismissible, highly-visible message across all your product pages? Now you can, with the new Global Banner! One of our top-voted Customer Ideas, the Global Banner allows an admin to display a one-line message, with optional hyperlink, at the top of their product pages.

Splunk On-Call: New Name, New Features to Improve On-Call For Your Teams

Today, more than ever, mobilizing remote teams to triage and resolve outages separates is separating enterprises able to accelerate their digital initiatives from those who don’t. Observability has elevated our ability to quickly detect problems and ask questions in our system to triage and reduce “time to clue” — an increasingly important metric.

All in on APM

It’s been just over six months since Splunk disrupted the Application Performance Monitoring (APM) market with the launched SignalFx Microservices APM, combining the technologies of SignalFx and Omnition. We have pushed ourselves harder and continued to invest in creating more value for our customers by making it easier for them to ingest ALL data and providing ever more powerful analytics on top of that data.

Splunk > Clara-fication: Job Inspector

Do you SPL? Well, if you do, you probably either already know about the job inspector, or you’re about to. Either way, you probably don’t know enough. Don’t worry though, that’s all about to change. There are a few different aspects of the job inspector that everyone should be familiar with. These include the execution costs, the search job properties, and the search.log. I’m going to walk us through these areas, and some others, and their importance.

Splunk Mobile Update: MDM Support for Microsoft Intune

In May, we announced new updates across the Splunk Connected Experiences portfolio, including support for many popular mobile device management (MDM) providers. With support for MDM capabilities, our customers can securely deploy Splunk Mobile at scale. Today, we are excited to share that Splunk Mobile now supports another popular Mobile Device Management (MDM) provider: Microsoft Intune. You can manage Splunk Mobile on both iOS and Android devices through Microsoft Intune.

Manage Splunk On-Call Using Terraform

HashiCorp’s Terraform has emerged as a powerful tool for managing infrastructure as code. Teams can fully describe an application’s infrastructure needs such as physical machines, VMs, containers and more using configuration files. This allows the application infrastructure to be version controlled, reducing human errors during deployments.