Splunk Enterprise

Splunk Enterprise is a data analytics platform from Splunk, a company now part of Cisco. It collects machine data from across an organisation so teams can search it, analyse it, visualise it and act on what it shows. It is used for IT operations, security and business monitoring.

What Splunk Enterprise offers

• Search and analysis — lets teams query large volumes of data and visualise the results.
• Security tooling — the wider Splunk range includes a security analytics product for detecting and responding to threats.
• Security automation — a separate product handles orchestration, automation and response for security operations centres.
• Infrastructure and application monitoring — covers hybrid cloud performance and application tracing.
• IT service intelligence — adds incident insight and service-level visibility.
• Cloud platform — a hosted version of Splunk is also available.

Who it works with

The platform serves IT, security and business operations teams, and the company points to large global organisations among its users.

Key facts

• Parent company: Cisco
• Related resources: an apps and add-ons library, training and certification, user groups and documentation
• Support: the support site offers several language versions