Overview
Splunk is a security automation and orchestration platform that integrates with your existing security technologies to provide a layer of “connective tissue” between them. Splunk operates at machine speed through the execution of digital “Playbooks” to achieve in seconds what may normally take minutes or hours to accomplish with the dozens of point products that you use every day. Splunk doesn’t replace existing security products, but instead makes your investment in them smarter, faster and stronger. Splunk accomplishes this through a logical architecture that abstracts product capabilities, through the Splunk App model, into simple Actions that can be automated from within Playbooks. This enables Splunk to act as an "operating system" for your security products.