splunk
Splunk Machine Learning Toolkit
Splunk Machine Learning Toolkit
The Splunk Machine Learning Toolkit delivers new SPL commands, custom visualizations, assistants, and examples to explore a variety of ML concepts.
Each assistant includes end-to-end examples with datasets, plus the ability to apply the visualizations and SPL commands to your own data. You can inspect the assistant panels and underlying code to see how it all works.
MLTK Quick Reference Guide: https://docs.splunk.com/images/3/3f/Splunk-MLTK-QuickRefGuide-2019-web.pdf
Assistants:
* Predict Numeric Fields (Linear Regression): e.g. predict median house values.
* Predict Categorical Fields (Logistic Regression): e.g. predict customer churn.
* Detect Numeric Outliers (distribution statistics): e.g. detect outliers in IT Ops data.
* Detect Categorical Outliers (probabilistic measures): e.g. detect outliers in diabetes patient records.
* Forecast Time Series: e.g. forecast data center growth and capacity planning.
* Cluster Numeric Events: e.g. cluster business anomalies to reduce noise.
Smart Assistants (new assistants with revamped UI and better ml pipeline/experiment management):
* Smart Forecasting Assistant:: e.g. forecasting app logons with special days.
* Smart Outlier Detection Assistant: e.g. find anomalies in supermarket purchases.
* Smart Clustering Assistant: e.g. cluster houses by property descriptions.
* Smart Prediction Assistant: e.g. predict vulnerabilities in firewall data.
Available on both on-premises and cloud.
(c) Splunk 2024. All rights reserved.
Splunk Cloud
Splunk Built
splunk
Palo Alto Networks App for Splunk
Palo Alto Networks App for Splunk
The Palo Alto Networks Add-on for Splunk has been deprecated and will soon be archived. View Details page for more information.
Splunk Cloud
splunk
Splunk ES Content Update
Splunk ES Content Update
The Splunk ES Content Update (ESCU) app delivers pre-packaged Security Content. ESCU provides regular Security Content updates to help security practitioners address ongoing time-sensitive threats, attack methods, and other security issues.
Security Content consists of tactics, techniques, and methodologies that help with detection, investigation, and response. Security Content enables security teams to directly operationalize detection searches, investigative searches, and other supporting details. ESCU can generate Notable/Risk Events in Splunk Enterprise Security. Security Content also contains easy-to-read background information and guidance, for key context on motivations and risks associated with attack techniques, as well as pragmatic advice on how to combat those techniques.
The analytic stories and their searches are also available at - https://github.com/splunk/security_content.
Splunk Cloud
Splunk Built
Splunk Machine Learning Toolkit
Palo Alto Networks App for Splunk
Splunk ES Content Update
