Splunk is the world’s first Data-to-Everything Platform. Now organizations no longer need to worry about where their data is coming from, and they are free to focus on the business outcomes that data can deliver. Innovators in IT, Security, IoT and business operations can now get a complete view of their business in real time, turn data into business outcomes, and embrace technologies that prepare them for a data-driven future.

Today, cybercriminals are consistently becoming more dangerous and more agile with their approach by using machine learning to exploit vulnerabilities. Sophistication of threats requires modern security solutions to keep up with malicious actors.

Many security professionals are challenged with managing the complexity of a shift to the cloud, operating with remote work and its accompanying security challenges, and dealing with mundane tasks, all while working through a skills shortage. Yikes.

Organizations today must adapt and evolve to deal with the broadscale ramifications of their security posture. 

Join our webinar to learn more about:
- How to optimize security operations and productivity
- The impact that security threats have on a real-world perspective and learn Splunk/NTT’s approach to solving these threats
- Practicing a secure by design to help minimize security risk while you innovate and grow
- How security teams can better operationalize security across hybrid and multi cloud environments for enhanced visibility

Become Cyber Resilient by Modernizing your SOC

Who Should Attend: Splunk Administrators, Security Analysts, SOC Manager

ES and ITSI Sitting in a Tree: How to use Notable Events to make Security and IT Collaboration Better
We’ve all heard the horror stories from Security and IT teams. Maybe it involves a maintenance window leaving a port open on the firewall that is being actively scanned by bad actors. Or perhaps security locks down the subnets for your cloud deployment and customers are unable to complete orders in the new stack. These problems are usually borne from groups working in silos and can result in costly and time consuming incidents that can impact the bottom line and create unnecessary threats.

This Tech Talk shares how to use what’s under the hood of ITSI and ES to share notable events and insights seamlessly between the two platforms.
- reduce your MTT-Everything 
- knock down silos 
- link Security and ITO together to increase velocity, while increasing visibility, and becoming more security minded

How to Use Notable Events to make Security and IT Collaboration Better

Who Should Attend: Splunk Administrators, Security Analysts, SOC Managers

Trickbot is a very popular crimeware carrier associated with recent ransomware campaigns. It is a trojan that has gained popularity from being effective at infecting and propagating botnets – one of the main financial drivers of cyber criminal groups. The effectiveness of trickbot crimeware comes from its stealthiness and versatility in installing payloads for further lateral movement and post-exploitation profit-driven activities such as cryptocurrency, ransomware, or banking fraud. But don’t worry! The Splunk Security Research team has developed an analytic story targeting Trickbot TTPs to help you detect them in your environment and respond immediately.

Tune in to learn:

-How Trickbots, botnets, and webinjects work together in a malicious cyber campaign
-How to utilize pre-built searches to detect Trickbots in your environment
-How to utilize pre-built automated playbooks to respond to Trickbots

Detecting Trickbot with Splunk

Who Should Attend: Splunk Administrators, IT Analysts

Join us for a deep dive into how best to leverage logs and metrics to monitor key data sources from your on-prem or cloud environments. From system health to system availability, we’ll show you how you can get started with monitoring using log data across different platforms such as Linux, Windows, VMWare, and cloud (AWS), and how to augment monitoring dashboards with metrics and host metadata. You will come away knowing how to get all the information you need in one place to speed up troubleshooting.

Tune in to learn how to:

- Increase your Splunk Core for IT Operations use cases, no matter your customer’s geography or business vertical (PBST included)
- Ease adoption with prescriptive maturation journeys and out of the box content, ultimately accelerating customers towards ITSI
- Successfully transition a heavy install base of SAI and other “App for Infrastructure” users to ITE Work, built on ITSI code base for improved customer experience

Get the Most Out of Your Logs for IT Monitoring and Troubleshooting

Who Should Attend: Site Reliability Engineer, Platform and Cloud Operations

If you’re like most Splunk Enterprise and Splunk Cloud customers, you’re getting all kinds of insights about your systems, applications, and services. But, have you thought about how effectively and efficiently your teams are responding to incidents? How many fires are you fighting? How many incidents have resolution owners? What kinds of incidents are most frequent? Do your alerts find an owner right away, or are they being passed around like a hot potato? Insights to all these questions — and acting on them — can be a game-changer for shortening outages, operating more efficiently, and reducing burnout in operations teams. This tech talk demonstrates the insights you can gain based on incident response from Splunk On-Call, and what you can do to get started.

Tune in to learn:
- What kind of incident response metrics and insights can I gain with Splunk
- What is Splunk On-Call
- How can I easily send on-call data into Splunk

Using Splunk for On-Call Insights

Who Should Attend: Splunk Administrators, IT Analysts

Are issues in SAP making you feel like you’re missing information? There’s a problem but you don’t know what it is? We all know SAP is a complex, yet mission-critical part of your business. Issues, outages and blind-spots can impact your bottom line… and your sanity!

Join us on this webinar to learn how you can bridge infrastructure data and SAP data, resulting in:

- Reduction in downtime
- Advanced notice of potential outages
- Reduced incident investigation time -- we have customers seeing a 90% reduction!
- Less finger-pointing in the war room

Harness the Power of ML driven Monitoring & Reporting in your SAP Infrastructure

The cloud offers a wide array of benefits, but migrating from your on-premises infrastructure, or adding more clouds to your existing ones can bring brand new hurdles for IT teams to overcome. Three of the most common challenges are; 1) Monitoring such a dispersed hybrid multi-cloud architecture, 2) Modernizing your tools, when measuring CPU usage once-a-minute no longer makes sense for containers, and 3) Knowing how a tech stack component such as SAP or a microservice impacts business goals.

These common issues illustrate that supporting today’s organizational digital transformation efforts mean; monitoring is required to move up a gear, there’s a greater need for observability, and an increased reliance on DevOps. Whether you are a DevOps practitioner, SRE, CTO or a sysadmin, you can join this webinar to learn:
What observability is and how it differs from monitoring
How monitoring is evolving into observability
How you can improve your MTTD and MTTR with real-time visibility and AI-driven streaming analytics
How Splunk Infrastructure Monitoring can help you keep pace, consolidate toolsets, and eliminate silos to get ahead of issues before impact

3 Common Multi-cloud Observability Challenges & How To Solve Them

Are your security analysts spending hours manually managing vulnerabilities? A strong vulnerability management program is essential to adequately secure a corporation, but doing this effectively can require exhaustive manual resources and valuable time your analysts could be using towards developing sophisticated security solutions. Splunk’s Threat and Vulnerability Management team has built an automated vulnerability management solution using Splunk Cloud and Splunk SOAR. We'll show you how to get your security analysts away from manual tracking so they can focus on resolving vulnerabilities before the bad guys break in.

Automation for the Modern SOC: Automating Vulnerability Management at Splunk

Speed and agility are no longer the only means to achieving true business agility, you also need access to quality, actionable data.
 
In this webcast hosted by Scott Carey, Group Editor at IDG, Mark Woods, Director of Technology and Innovation at Splunk will explain how it helps organisations tap their data to become more agile in response to changing business demands. Then Damien Perrem, IT operations manager for payments at Allied Irish Banks will explain how his organization has leveraged better service intelligence to be more responsive to business demands.
 
Topics discussed include:
Getting full visibility into your customer and employee behaviour and using that to drive better decisions
Why you need greater agility
What is dark data and how to get at it
What next? Understanding how to move transformation efforts forward in difficult times

From basketball to chess: How the Rules of Business Agility have Changed

We want to ditch the pitch and get straight to the point in this new webinar series dedicated to microservices. From design to troubleshooting, no matter where you are in your journey to move from ‘monolith’ to fully observable microservices - at least one of these sessions is designed to give you all the information you need. Feel free to join all four webinars, or just skip to the ones best suited to you: 

So you’ve decided you need microservices, but want to know more on how to deploy them. This session covers:
- Design considerations such as; how to avoid distributed monoliths, sizing microservices, when not to use, required instrumentation, and what microservices do with data
- Architecture options; containers or serverless? To saga or not to saga?
- Key migration and deployment strategies

Moving from Monoliths to Microservices: Design, Architecture & Deployment

As organisations rapidly grow their footprints in the cloud, it becomes increasingly important to regularly review the accounts and permissions that are being configured across a wide variety of cloud resources. Preventing misuse of privileged accounts is extremely important for defending against all malicious intrusions and data exfiltration. Phil Royer, our distinguished Splunk SOAR researcher, will walk you through how to monitor and protect your cloud accounts across GCP, Azure, and AWS with pre-built playbooks that you can leverage today.

Automation for the Modern SOC: Protecting your Cloud Accounts with Automation

Who Should Attend: Splunk Administrators, IT Analysts, NOC Managers

Faster Time to Value with ITSI Content Packs
Disparate services cause confusion across distributed teams, and onboarding to a new platform takes time and resources. With ITSI Content Packs, you can now set up your services with only a few clicks, for even faster time to value. Whether you’re invested in Microsoft 365 or SAP - we’ve got you covered.

Join this tech talk to learn about:

- How the Content Library helps you gain access to content packs across common tools and services you already use
- How to install Content Packs through the Content Library
- Best practices to gain the most out of ITSI
- Bulk updating of content packs through Splunkbase

Faster Time to Value with ITSI Content Packs

We want to ditch the pitch and get straight to the point in this new webinar series dedicated to microservices. From design to troubleshooting, no matter where you are in your journey to move from ‘monolith’ to fully observable microservices - at least one of these sessions is designed to give you all the information you need. Feel free to join all four webinars, or just skip to the ones best suited to you: 

Step 1: The Fundamentals - Are Microservices Worth the Hype?
Your kick-start guide to understanding microservices will include:
- Current context for IT and DevOps practitioners, and why microservices are so popular
- The differences between monolith apps, microservices and distributed monoliths, etc.
- The benefits and challenges of Microservices

Moving from Monoliths to Microservices: Are Microservices Worth the Hype?

Monitoring Core Web Vitals is, well, vital to ensuring users have a great experience when visiting your website, and are essential to driving traffic to your website. They are the most modern way to quantify the performance and user experience of a web property. Not only are Largest Contentful Paint (LCP), First Input Delay (FID), and Cumulative Layout Shift (CLS) important when optimizing your site, starting in Summer 2021 Google will begin using these three metrics as a factor in a site’s search rankings.

The importance of incorporating Web Vitals into your Observability practice is larger than ever. With Splunk Synthetic Monitoring you can proactively run tests to measure the performance of Google Web Vitals on your company’s website and alert you on any issue. And if your website needs improvement, our Web Optimization feature will run through hundreds of best practices, providing you with actionable insights to improve your user experience.

Join Splunk’s Billy Hoffman for a deep dive into Core Web Vitals and see why incorporating these user-centric metrics into your deployments can create great user experiences and improve your business.

In this webinar you will learn:
- What Core Web Vitals are, how they’re measured, and why they’re important to both the business and your Google ranking.
- What aspects of a website, such as JavaScript size or critical rendering path, impact each metric.
- How to measure Google Web Vitals on your website.
- Which Performance optimizations should be adopted to improve specific Web Vitals.
- Best practices for benchmarking and improving web vitals scores.
- How organizations can put systems in place to prevent regressions.

How to Use Digital Experience Monitoring to Improve Core Web Vitals

Automation for the Modern SOC Series, Episode Three : Automating Phishing Response and Threat Intel   Phishing is one of the world's most effective attack vectors practiced by criminals to help assess a target organization’s security posture. In this session, see how Splunk SOAR and TruSTAR work together to simplify your phishing response, and protect you from these criminals. TruSTAR works to enrich SOC workflows with normalized threat intelligence from third-party sources. Splunk SOAR provides context, validation, and automated response using integrations like Recorded Future and Zscaler. Turn your data into action.

Automation for the Modern SOC: Automating Phishing Response and Threat Intel

Who Should Attend: Site Reliability Engineer, Platform and Cloud Operations, Developer, Software Engineer, DevOps Engineer

OTel Me About Observability
Telemetry data is critical in solving both availability and performance issues, especially in distributed, polyglot architectures. Unfortunately, telemetry data has often been proprietary, at least when it comes to ease of use or combining different signals. OpenTelemetry is an open-source and vendor-agnostic project set on democratizing instrumentation and data collection of telemetry signals. Beyond providing the ability to generate and emit traces, metrics, and eventually logs, the project provides other core concepts, including the notion of resources, semantic conventions, and a collector component. In this talk, you will learn all about OpenTelemetry and how it can be used to help provide observability.

Takeaways from this webinar include:
- How to get started with OpenTelemetry
- Harnessing the power of OpenTelemetry in Splunk Observability Cloud
- The future of Observability

OTel Me About Observability

Companies must deliver more digital services to customers, and any outage poses a great risk to reputation and revenue. The need for end-to-end visibility increasingly underpins the critical relationship between IT and business teams. This session will explain why lines of business continue to face the risks and costs of service degradation and outages and help you understand how to associate infrastructure and application metrics with the drivers of the end-user and business health KPIs to really become a business partner.

Rethink IT Series, Session Four: Shift from a “Silo Lens” to a “Service Lens”

Automation for the Modern SOC Series, Episode Two : How Uber Implements Splunk SOAR Case Management

Case management ensures that threats are proactively identified, prioritized, and rapidly investigated. This functionality is built into Splunk SOAR, and allows you to codify your standard operating procedures into reusable templates. In this session, we’ll show you how Uber uses Splunk SOAR case management functionality to create custom lists and design playbooks, reducing time spent to engage, mitigate and resolve threats.

Automation for the Modern SOC: How Uber Implements Splunk SOAR Case Management

Congratulations as you move beyond dev/test to roll out Kubernetes across your organization in production. While Kubernetes provides the agility for development teams, it also introduces operational complexity and monitoring challenges. In this session, we will discuss how to efficiently scale Kubernetes with Google Kubernetes Engine (GKE) and how to gain observability into your entire Kubernetes environment with Splunk.

Join Amit Sharma, Product Marketing Director, IT Solutions at Splunk, and Cuyler Dingwell, Customer Engineer at Google Cloud to learn:

- Challenges in operating distributed cloud-native environments such as Kubernetes
- Key considerations in choosing Kubernetes platforms
- Real-time monitoring and troubleshooting strategies for Kubernetes deployments
- Demo covering monitoring and investigation of real-world performance issues with Splunk

Scaling Kubernetes with Splunk and AWS

Kubernetes

IT Monitoring

Service Delivery

Operational Efficiency

Operational Performance

Data Security

Data Analytics

Cloud Applications

Infrastructure Management

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Scaling Kubernetes with Splunk and AWS

Presented by

About this talk

More from this channel