Splunk and F5 Team Up To Deliver Advanced Search, Analysis and Reporting Capabilities

Splunk IT Search Helps F5 Users Expand their Security Management Capabilities

SAN FRANCISCO, CA — November 25, 2008 — Splunk Inc., the IT Search company, today announced their partnership with F5 Networks, Inc. (NASDAQ: FFIV), the global leader in Application Delivery Networking, bringing innovative IT Search and reporting capabilitiesto the leading application infrastructure technology. Splunk and F5 have created Splunk for use with F5 solutions, running on the Splunk IT Search engine. Splunk for use with F5 solutions enables users to meet the complex needs of incident response, threat analysis and compliance and is designed specifically to work with the F5® BIG-IP® Application Security Manager™ (ASM™) and FirePass® SSL VPN solutions, with other F5 product-specific interoperability to follow.

Splunk for use with F5 solutions provides security event search correlation, visualization and reporting for large-scale enterprises and carrier grade networks. With the ability to search and index data from any server, application or network device, Splunk for use with F5 solutions works across all the IT components in complex infrastructures including WebApplication Firewalls and SSLVPNs, providing security teams pre-built searches, alerts and for a more complete understanding of any security threats.

"Enterprise customers demand technologies that validate and visualize the effectiveness of their security solutions," said Mark Vondemkamp, Director of Product Management, Security at F5. "Having the right tools in place to be able to report on threats before they create chaos is essential. With the Splunk application, our customers are able to more easily meet the complex needs of compliance, security alerting and reporting – increasing their ability to detect and respond to threats, and minimizing the risk of disruption, harmful events and punitive fines."

Splunk for use with F5 solutions delivers real-time information regarding security breaches and compliance that empower F5 customers to detect and halt these threats before they become costly or damaging to business. Splunk IT Search arms these organizations with an up-to-the-moment understanding of the IT infrastructure, without compromising access to mission critical systems or confidential data.

"The changing threat landscape in large-scale enterprise and carrier grade networks requires the ability to obtain real-time situational awareness," said Michael Baum, Co-founder and Chief Corporate & Business Development Officer, Splunk. "Positioned in the Leaders Quadrant in the Gartner Magic Quadrant for the Application Delivery Controller market, F5 is at the center of tremendous critical security data. The combination of F5 and Splunk lets system and security administrators quickly understand new and changing attacks in the moment."

Product Features

Examples of the advanced searches and reports accessible for F5 ASM include:

  • Top violations
  • Top violations by protocol (HTTP, FTP, SMTP)
  • Top HTTP violations by web application
  • Top attackers
  • Top attackers by protocol (HTTP, FTP, SMTP)
  • Top web applications attacked, alerted or blocked
  • Top web applications alerted by IP address
  • Attacks by location
  • Top response codes by web application
  • Top alerted or blocked web application requests by time period
  • Web application requests by method
  • Custom ASM forensics filtering & search

Examples of the advanced searches and reports accessible for F5 FirePassSSL VPN include:

  • Detailed User, Browser, OS and Session Statistics
  • Configuration Change Statistics
  • Failed Logon Statistics

Splunk for use for F5 solutions can be installed as an add-on "application" to the core Splunk application, and can be easily configured to filter and report on any information available in the F5 product log files.

Product Pricing & Availability

Splunk for use with F5 solutions is free (indexing up to 500 MB a day) for Splunk users and F5 customers, and is available for download at: www.splunk.com/partners/f5

About Splunk

Splunk is the IT Search company innovating large-scale, high-speed indexing for IT infrastructures. The company's freely downloadable software indexes and makes it possible to search and navigate data from any application, server or network device in real time. Logs, configurations, messages, traps and alerts, scripts and metrics: if a machine can generate it — Splunk can index it. It's easy to download, install and use, and is very powerful. More than 750 enterprises, government organizations, and service providers and more than 250,000 users are achieving higher availability, investigating security incidents in record time, and meeting compliance requirements at lower costs with Splunk. Over 50 OEM, System Integrator, Value Added Reseller and Managed Service Provider partners have fuelled their offerings with IT Search. Partners such as BT, Cisco, Radware and Trigeo are driving new business with innovative products powered by Splunk. Download your own free copy today at http://www.splunk.com/download.

The Magic Quadrant

The Magic Quadrant is copyrighted 2008 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

F5, BIG-IP, Application Security Manager, ASM, and FirePass are either registered trademarks or trademarks of F5 Networks, Inc., in the United States and/or other countries. Splunk is a registered trademark of Splunk Inc.

For more information, please contact:

Joe Fitzpatrick
Director of Marketing Communications
Splunk, Inc.
1-415-848-8553
jfitzpatrick@splunk.com

Katie Watson
Voce Communications
1-415-848-2589
kwatson@vocecomm.com


About Splunk

Splunk® Inc. provides the engine for machine data™. Splunk software collects, indexes and harnesses the massive machine data continuously generated by the websites, applications, servers, networks and mobile devices that power business. Splunk software enables organizations to monitor, search, analyze, visualize and act on massive streams of real-time and historical machine data. More than 3,300 enterprises, universities, government agencies and service providers in more than 75 countries use Splunk Enterprise to gain operational intelligence that deepens business understanding, improves service and uptime, reduces cost and mitigates cybersecurity risk. To learn more, please visit www.splunk.com/company.

For more information, please contact:

Media contact:
Paul Wilke
Director of Public Relations Splunk Inc.
415.848.8578
pwilke@splunk.com
Twitter: @SplunkNews

Splunk is a registered trademark of Splunk Inc. in the Unites States and other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective owners.