Splunk Enterprise Security is a next-generation security information and events management (SIEM) system on modular security frameworks with efficient detections based on correlation searches of essential data sources mapped to Splunk’s Common Information Model. It includes 12 cloud security analytic stories with 49 detection rules that cover Google Cloud, Kubernetes, and cloud infrastructure.

After reducing the time it takes to detect a threat, the next step is to reduce the time it takes to respond to a threat. Splunk SOAR (security orchestration, automation, and response) platform accomplishes this with playbooks that use actions for Google Cloud technologies, such as Compute Engine, Identity and Access Management (IAM), and Cloud Storage.

Chrome has partnered with Splunk on a new integration to collect, analyze, and extract insights from security events to identify high-risk behavior. These events can include password changes, unapproved password reuse, data exfiltration, unsafe site visits, and malware transfer events within managed Chrome browsers.

Here’s a selection of detailed documentation available to help you get started with Splunk on Google Cloud and learn the best practices to implement it.

In this hands-on lab, you'll learn how to configure Google Cloud to send logging and other infrastructure data to Splunk Cloud.

An introduction to 11 solutions that can help you get more out of Splunk Cloud on Google Cloud.

From refactoring to re-architecting applications, this guide outlines an effective framework for managing the newfound operational complexity that cloud brings.

Learn how Splunk enhances Google Cloud’s extensive security measures by providing additional analysis and automated response to improve IT security efficiency.