Splunk
Smooth operator | Searching for multiple field values
With the IN operator, you can specify the field and a list of values.
Threat Intel and Splunk Enterprise Security Part 2 - Adding Local Intel to Enterprise Security
Splunker John Stoner shares a walkthrough for how to add local threat intelligence into Splunk Enterprise Security
Configure Jupyter Notebook to Interact with Splunk Enterprise & the Splunk Machine Learning Toolkit
Configure Jupyter Notebook to interact with Splunk Enterprise and the Splunk Machine Learning Toolkit
Boss of the SOC 2.0 Dataset, Questions and Answers Open-Sourced and Ready for Download
You asked, we delivered – Boss of the SOC 2.0 has been open sourced, including dataset, questions, answers and even a scoring server update!
End of Availability: Splunk-Built Apps and Add-ons
Announcing the end of life and end of support for a number of Splunk apps and add-ons happening on June 16, 2019
Modifying the Incident Review Page
How to modify the Incident Review page and add information to Notable Events in Splunk Enterprise Security
