Digital Resilience + AI + Splunk = A Winning Hand

July 21, 0023

Just about everybody heading to Vegas hopes to put a couple of dollars in a slot machine and hit the jackpot. Bad actors have that in common with Vegas gamblers—they are both hoping to win. Maybe serious gamblers, those looking for more than a quick, easy payout, have even more in common with bad actors. These savvy players are using technology to harness or hone the pattern finding expertise of artificial intelligence and apply it to their betting. They hope to beat the system with the goal of making money. Both the gambler and the bad actor are looking for an AI advantage.

Cybersecurity and observability giant Splunk is looking to even the playing field for it’s clients against bad actors using tech like AI and other tools at their disposal by by helping them to build Digital Resilience with Portfolio Innovations, product enhancements, threat research and a continued investment in advanced technologies. The winning hand for the enterprise is a unified experience and unparalleled visibility across any environment

hashtagsplunkconf23 Kicks Off in Vegas

With 7,000+ attendees including 40+ sponsors and 1,500+ partners, .conf23, which ran from July 17-July 18 in Las Vegas, was Splunk’s most anticipated event of the year. Throughout the conference, attendees had the opportunity to attend 200+ technical breakout sessions across five tracks, as well as participate in various hands-on workshops and product demos to help improve their organizations’ digital resilience.

During the two day event, Splunk leaders took the mainstage alongside Splunk customers FedEx, Carnival, IKEA and VMware to reveal the latest security and observability product innovations and celebrate customer success. During the opening keynote on Monday, July 17, attendees heard how FedEx is powering its business transformation. Attendees got an inside look at Splunk SURGe’s latest research into the evolving threat landscape. On Tuesday, July 18, Splunk customers and executives returned to demonstrate how a unified security and observability platform is the most effective way to help ensure digital systems remain secure and reliable, despite any disruption.

Doubling Down on AI

Splunk launched a collection of new artificial intelligence (AI)-powered offerings to enhance its security and observability platform.

The companies approach to AI is driven by 3 principles:

·      Domain and Splunk Specific

·      Human in the Loop

·      Open and Extensible

Splunk AI empowers organizations to enhance their detection, investigation, and response capabilities while maintaining control over AI implementation

Key to Splunk AI is the AI Assistant. This tool utilizes generative hashtagAI to provide a security professional with an interactive chat experience using natural language. Security teams can create Splunk Processing Language (SPL) queries, expanding their understanding of the platform and optimizing time-to-value. The AI Assistant aims to increase accessibility to SPL. The goal here is to create easier access to valuable data insights.

Splunk AI is integrated with domain-specific large language models (LLMs) and ML algorithms that leverage security and observability data. Splunk is committed openness and extensibility. The thinking here is that organizations are enabled and empowered to integrate their AI models or third-party tools into the mix.

A quicker path to alerting speed and accuracy strengthens digital resilience. With the goal of improving faster detection and providing better analysis, Splunk emphasizes domain specificity in its models. If models are tuned to assist with specific use cases and built by experts in the field, a win is inevitable. Utilizing a generic large language models as a starting point, Splunk is purpose building complex anomaly detection algorithms. This domain specific insight is built from the real world experience of thousands of customers across the globe. The introduction of the

Splunk App for Data Science and AI allows Splunk to build a bridge that incorporates data science techniques into security and oberservability workflows.

The goal is to build an approach that merges automation and AI capabilities across security and oberservability allowing for better human decision making.

Cloud Security for the Win

Another key announcement at .conf23 was that Splunk and Microsoft are partnering to build Splunk’s enterprise security and observability offerings on Microsoft Azure. Splunk solutions will be available for purchase on the Microsoft Azure Marketplace.

Microsoft will collaborate with Splunk to develop a differentiated product offering by leveraging Microsoft Azure for Splunk’s cloud products.

Splunk customers that are leveraging Microsoft Azure can now deploy Splunk as part of their cloud strategy.

Vegas and Splunk never disappoint. See you at .conf24