Monitoring Splunk

how log monitoring used and whether it is secure?

anjumtcs
New Member

how log monitoring used and whether it is secure?.Please reply to my question in brief

Tags (1)
0 Karma
1 Solution

acharlieh
Influencer

Log, but more generally machine data, monitoring and correlation, is used by many different businesses to accomplish a wide variety of goals. You may be interested in reviewing a number of the Splunk customer stories: http://www.splunk.com/customers

As a concept log monitoring in and of itself is neither dangerous nor safe, rather there are a number of considerations and details about your environment including (but not limited to) access controls, transport protocols, and even the nature of the data being collected itself, that may present various risk factors and that you would want to mitigate when implementing a log monitoring strategy, if such risks are not acceptable to the organization. Careful evaluation of these risks and implementation of mitigations of unacceptable risks allows for the successful deployment of data aggregation solutions in even the most secure environments (and it as a concept could even be used to mitigate other material risks to the organization)

Splunk for its part provides some of the basics in terms of tunables available with their software in the docs: http://docs.splunk.com/Documentation/Splunk/6.4.2/Security/WhatyoucansecurewithSplunk

Splunk and a number of their partners with certain sets of skills can also be contracted to provide Professional Services that can help with secure deployment in risk adverse environments.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

It's totally safe.

acharlieh
Influencer

Log, but more generally machine data, monitoring and correlation, is used by many different businesses to accomplish a wide variety of goals. You may be interested in reviewing a number of the Splunk customer stories: http://www.splunk.com/customers

As a concept log monitoring in and of itself is neither dangerous nor safe, rather there are a number of considerations and details about your environment including (but not limited to) access controls, transport protocols, and even the nature of the data being collected itself, that may present various risk factors and that you would want to mitigate when implementing a log monitoring strategy, if such risks are not acceptable to the organization. Careful evaluation of these risks and implementation of mitigations of unacceptable risks allows for the successful deployment of data aggregation solutions in even the most secure environments (and it as a concept could even be used to mitigate other material risks to the organization)

Splunk for its part provides some of the basics in terms of tunables available with their software in the docs: http://docs.splunk.com/Documentation/Splunk/6.4.2/Security/WhatyoucansecurewithSplunk

Splunk and a number of their partners with certain sets of skills can also be contracted to provide Professional Services that can help with secure deployment in risk adverse environments.

martin_mueller
SplunkTrust
SplunkTrust

I'm afraid you'll have to be a bit more specific in your answers question.

anjumtcs
New Member

I want to know about log monitoring,its uses and whether it is safe to use log monitoring?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...