Splunk Enterprise users need targeted, summarized data to help improve security efficiency and reduce the time to detection. The Gigamon Visibility App for Splunk combined with the GigaSECURE® Security Delivery Platform allow SecOps teams to achieve network and security operational excellence. GigaSECURE provides granular, customizable traffic visibility to Splunk apps while the Gigamon Visibility App for Splunk enables operational intelligence.
The Gigamon Visibility App for Splunk (downloadable from the Splunk Store) can provide SecOps and NetOps teams with insight into the health and analytics of networks supported by the GigaSECURE® Security Delivery Platform.
Figure 1 : The GigaSECURE platform provides traffic visibility to the Splunk apps and the Gigamon Visibility App for Splunk enables operational intelligence.
In a multi-vendor SIEM deployment with Splunk, operators can use:
Figure 2 : Multi-vendor SIEM deployment where Gigamon Visibility App for Splunk enables operational intelligence