Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure...

22
Introduction to Splunk “From bits to information”

Transcript of Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure...

Page 1: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Introduction to Splunk

“From bits to information”

Page 2: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Outline

• Why use Splunk?• Application of Splunk.

Page 3: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Why? PCI

Page 4: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Before, During and After

Page 5: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Logs

Page 6: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

And the complexity …

Page 7: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Introduction to Splunk

“From bits to information”

Get

Page 8: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Buttercup Games

Get

Page 9: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 10: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Page 11: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

http://asecuritysite.com:8000/en-GB/app/search/search%3Fq=search%2520get%2520status%253D404&display.page.search.mode=fast&dispatch.sample_ratio=1&workload_pool=&earliest=0&latest=&sid=1593014609.1857
Page 12: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 13: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 14: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 15: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 16: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 17: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 18: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 19: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 20: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 21: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Splunk

Get

Page 22: Introduction to Splunk · Splunk “From bits to information” ... AWS Cloudtrail. Amazon S3 Azure Windows Azure Cloud amazon webservices Weblogic. WebSphere. Tomcat Application

Introduction to Splunk

“From bits to information”


Splunk user group - automating Splunk with Ansible

Splunk user group - automating Splunk with Ansible

Webinar: Securely Configuring and Mining AWS CloudTrail

Webinar: Securely Configuring and Mining AWS CloudTrail

Program Overview - Splunk...mission-critical services. None. Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Implementing

Program Overview - Splunk...mission-critical services. None. Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Implementing

Splunk For IT Operational Intelligenceuploads.integrity360.com/1425903243-Splunk-for-IT-Operations.pdf · • Splunk Apps –Splunk App for VMware –Splunk Apps for Citrix & Hyper

Splunk For IT Operational Intelligenceuploads.integrity360.com/1425903243-Splunk-for-IT-Operations.pdf · • Splunk Apps –Splunk App for VMware –Splunk Apps for Citrix & Hyper

Splunk Conf2010: Corporate Express presents Splunk with SAP

Splunk Conf2010: Corporate Express presents Splunk with SAP

Deep Dive AWS CloudTrail

Deep Dive AWS CloudTrail

AWS CloudTrail & Alert Logic Log Manager

AWS CloudTrail & Alert Logic Log Manager

AWS CloudTrail - Guía del usuario · AWS CloudTrail Guía del usuario Funcionamiento de CloudTrail Un registro de seguimiento aplicable a todas las regiones Cuando se crea un registro

AWS CloudTrail - Guía del usuario · AWS CloudTrail Guía del usuario Funcionamiento de CloudTrail Un registro de seguimiento aplicable a todas las regiones Cuando se crea un registro

Integrate AWS CloudTrail

Integrate AWS CloudTrail

stoQ’ing your Splunk - SANS · PDF filestoQ’ingyour Splunk Ryan Kovar, Splunk Marcus LaFerrera, PUNCH SANS DFIR 2016

stoQ’ing your Splunk - SANS · PDF filestoQ’ingyour Splunk Ryan Kovar, Splunk Marcus LaFerrera, PUNCH SANS DFIR 2016

CloudTrail x splunk

CloudTrail x splunk

Gain Insights into your Microsoft Azure Data using Splunk · Azure Functions Process events with Serverless code. • Make composing Cloud Apps insanely easy • Develop Functions

Gain Insights into your Microsoft Azure Data using Splunk · Azure Functions Process events with Serverless code. • Make composing Cloud Apps insanely easy • Develop Functions

Industrial Data Internet of Things splunk (REST API, SDKs) splunk . TESCO splunk 500 Y—Jt1-3— 41328 . SHANON 1/5 splunk . htt . (500MB/B) s lunk splunk . Created Date:

Industrial Data Internet of Things splunk (REST API, SDKs) splunk . TESCO splunk 500 Y—Jt1-3— 41328 . SHANON 1/5 splunk . htt . (500MB/B) s lunk splunk . Created Date:

Incident Response - asecuritysite.com · Incident Response Eve ... Snort. Intrusion Detection System Alice Cloud AWS Cloudtrail. Amazon S3. Azure. Application Serv Weblogic. WebSphere.

Incident Response - asecuritysite.com · Incident Response Eve ... Snort. Intrusion Detection System Alice Cloud AWS Cloudtrail. Amazon S3. Azure. Application Serv Weblogic. WebSphere.

Splunk Spark Integration - GitHub Pageslitaotao.github.io/files/4. splunk_spark.pdf · Splunk Spark Integration ... • Splunk"products:""! Splunk"Enterprise"! ... splunk_spark Created

Splunk Spark Integration - GitHub Pageslitaotao.github.io/files/4. splunk_spark.pdf · Splunk Spark Integration ... • Splunk"products:""! Splunk"Enterprise"! ... splunk_spark Created

ReversingLabs Explainable Threat Intelligence Enriches ... Data Sheets/RL-Splunk...sent to Splunk. • In Splunk, the TitaniumScale report is correlated with other available Splunk

ReversingLabs Explainable Threat Intelligence Enriches ... Data Sheets/RL-Splunk...sent to Splunk. • In Splunk, the TitaniumScale report is correlated with other available Splunk

PRD-015 - Amazon CloudTrail

PRD-015 - Amazon CloudTrail

Rivium Splunk Windows · o Splunk Enterprise Security * o uberAgent* o Splunk App for Web Analytics Common Splunk Apps & Add-ons 15 SplunkingWIndows o Splunk Add-on for Microsoft

Rivium Splunk Windows · o Splunk Enterprise Security * o uberAgent* o Splunk App for Web Analytics Common Splunk Apps & Add-ons 15 SplunkingWIndows o Splunk Add-on for Microsoft

AWS CloudTrail - Guia do usuário...AWS CloudTrail Guia do usuário Como CloudTrail funciona Se for adicionada alguma região depois que você criar uma trilha que se aplica a todas

AWS CloudTrail - Guia do usuário...AWS CloudTrail Guia do usuário Como CloudTrail funciona Se for adicionada alguma região depois que você criar uma trilha que se aplica a todas

SplunkingYour Mobile Apps - .conf19 | Splunk · Introducing Splunk for Mobile Intelligence (Splunk MINT) Deploying Splunk MINT – Intro to SDKs – Getting Started Using Splunk MINT

SplunkingYour Mobile Apps - .conf19 | Splunk · Introducing Splunk for Mobile Intelligence (Splunk MINT) Deploying Splunk MINT – Intro to SDKs – Getting Started Using Splunk MINT