Announcing the General Availability of Splunk® Enterprise Security 8.0

At .conf24 we unveiled the private preview of Splunk Enterprise Security 8.0, and the buzz was undeniable.

Today, we are thrilled to announce that Splunk Enterprise Security 8.0 is now generally available! This isn’t just another release—it’s a massive leap forward that redefines and revolutionizes security operations.

Splunk Enterprise Security 8.0 is the cornerstone of the SOC of the Future. With groundbreaking advancements featuring a seamless investigation and case management solution that includes integrated automation with Splunk SOAR1, Splunk Enterprise Security 8.0 delivers the most seamless analyst experience across the threat detection, investigation, and response (TDIR) workflow.

We Promised the SIEM of the Future. And We Delivered.

Splunk Enterprise Security 8.0 revolutionizes the SOC workflow experience from the ground up. Now security analysts can seamlessly detect what matters, investigate holistically, and respond to threats —faster and more efficiently than ever before. The SIEM of the future is here: unified TDIR with automated workflows, modern aggregation and triage capabilities, enhanced detections and simplified terminology.

For far too long, SOC teams have struggled with disjointed tools and processes. With Splunk Enterprise Security 8.0, those days are over. Here’s how we’re revolutionizing the SOC workflow experience and boosting analyst productivity:

A Game-Changing Unified Work Surface. No More Pivoting Between Tools.

Say goodbye to spending extra time pivoting between tools. Imagine doing everything from one modern, unified interface. Now with the direct integration of Splunk SOAR playbooks and actions with the case management and investigation features of Splunk Enterprise Security and Mission Control, analysts can handle everything from detection, investigation and response without switching context. This significantly boosts operational efficiency by providing a unified solution for data aggregation, analysis, and automation—without leaving Splunk Enterprise Security.

Find and Automate What Matters, Faster: Say Hello to Finding Groups2

Now, with Finding Groups, you can view all related high-fidelity findings in one click. Finding Groups automatically aggregates findings based on predetermined rules against common security grouping techniques and calculations. This further simplifies the SOC analyst experience to take action and respond to sophisticated threats. But we didn’t stop there. Now, with native Splunk SOAR integration, analysts can leverage Automation Rules to assign playbooks to specific detections, enabling those playbooks to run automatically whenever designated findings are triggered in Splunk Enterprise Security. Unifying these capabilities enables the SOC to accelerate their automation journey—all through a single view.

Seamlessly Implement a Risk-based Alerting Detection Strategy

New, enhanced detections provide turnkey capabilities to build high-confidence aggregated alerts for investigations. We also added native, automatic detection versioning within Enterprise Security Content Updates (ESCU) and customer-owned detections.

Breaking Down Data Silos: Simplified Terminology, Aligned with OCSF

With simplified terminology across TDIR workflows, Splunk Enterprise Security now aligns with the Open Cybersecurity Schema Framework (OCSF). This ensures that every SOC analyst speaks the same language within the TDIR workflow, creating a truly seamless experience.

The Market-Leader in SIEM. The Proof is in the Recognition.

The industry recognition keeps rolling in. This year, we celebrated being recognized as a Leade r ten times in a row in the 2024 Gartner® Magic Quadrant™ for SIEM. But that’s not all, Splunk was ranked first in every Use Case in the 2024 Gartner® Critical Capabilities for Security Information and Event Management.

And if that’s not enough to get excited about—Splunk has been ranked #1 for the fourth consecutive year in the IDC Worldwide Security Information and Event Management Market Shares, 2023: The Leaders in SIEM City (doc # US52525024, September 2024) report.

Splunk has also been named a Leader in the IDC MarketScape: Worldwide SIEM for Enterprise 2024 Vendor Assessment (doc #US49029922, September 2024).

Splunk Enterprise Security 8.0 is available now for cloud and on-premise environment customers. Please reach out to your account representative for more information.

Watch our on-demand discussion featuring Forrester’s Allie Mellen on trends in today’s SIEM market. You'll also learn more about how Splunk is revolutionizing the analyst experience with Splunk® Enterprise Security 8.0 through native integration with Splunk SOAR.

We’re always listening! Have ideas and requests? Share them with us through Splunk Ideas.

We’re building the SOC of the Future together. To learn more about Splunk Enterprise Security, visit our website. Happy Splunking!

1Splunk SOAR Cloud subscription required

2 *In preview with Splunk Enterprise Security 8.0

/en_us/blog/fragments/enterprise-security-tour
Style
two-column

Related Articles

Staff Picks for Splunk Security Reading August 2023
Security
4 Minute Read

Staff Picks for Splunk Security Reading August 2023

Splunk security experts share a list of presentations, whitepapers, and customer case studies from August 2023 that they feel are worth a read.
Splunk Security Use Cases
Security
2 Minute Read

Splunk Security Use Cases

Key Threat Hunting Deliverables with PEAK
Security
4 Minute Read

Key Threat Hunting Deliverables with PEAK

When most people think of threat hunting, they think of uncovering unknown threats – but that is only one of many (better) reasons to show value with threat hunting.
Unified Strategies Across IT and Security for Cutting-Edge Detection, Investigation and Response
Security
4 Minute Read

Unified Strategies Across IT and Security for Cutting-Edge Detection, Investigation and Response

Splunk's Mike Horn shares a closer look at the value of a unified approach to security and observability.
Detecting Lateral Movement Using Splunk User Behavior Analytics
Security
8 Minute Read

Detecting Lateral Movement Using Splunk User Behavior Analytics

The blog is to introduce lateral movement detection using Splunk User Behavior Analytics (UBA)
Integrated Intelligence Enrichment With Threat Intelligence Management
Security
1 Minute Read

Integrated Intelligence Enrichment With Threat Intelligence Management

Threat Intelligence Management enables analysts to fully investigate security events or suspicious activity by providing the relevant and normalized intelligence to better understand threat context and accelerate time to triage.
Splunk SOAR Playbook of the Month: Investigations with Playbooks
Security
2 Minute Read

Splunk SOAR Playbook of the Month: Investigations with Playbooks

For this month’s edition of Playbook of the Month, we’ll look at how you can perform investigations at machine speed using Splunk SOAR and one of our investigation playbooks, Internal Host WinRM Investigate.
Using Splunk Stream for Hunting: Finding Islands in the Stream (of Data)
Security
4 Minute Read

Using Splunk Stream for Hunting: Finding Islands in the Stream (of Data)

Let's look at how to use the popular Splunk Stream App for our favorite purpose: threat hunting! This is part of our Threat Hunting with Splunk series.
That Was Easy! Manage Lookup Files and Backups With the Splunk App for Lookup File Editing
Security
2 Minute Read

That Was Easy! Manage Lookup Files and Backups With the Splunk App for Lookup File Editing

The 4.0.1 release of the App for Lookup File Editing helps users mitigate issues with new features such as a backup size limit and dashboards for tracking backup size.
/en_us/blog/fragments/about-splunk
/en_us/blog/fragments/subscribe-footer