Splunk admin onboarding checklist for Splunk Mission Control

Get started with Splunk Mission Control

Get data into Splunk Mission Control from Splunk Enterprise Security (Cloud)

Example incident response workflow in Splunk Mission Control

Best practices for improving performance in Splunk Mission Control

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/triage-incidents/triage-incidents-using-incident-review-in-splunk-mission-control

Triage incidents

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/investigate-incidents/investigate-an-incident-in-splunk-mission-control

Investigate incidents

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/respond-to-incidents/create-response-templates-to-establish-guidelines-for-incident-response-in-splunk-mission-control

Respond to incidents

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/automate-incident-response/automate-incident-response-with-playbooks-and-actions-in-splunk-mission-control

Automate incident response

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/detect-and-manage-threats-with-threat-intelligence-management/get-started-with-threat-intelligence-management-in-splunk-mission-control

Detect and manage threats with Threat Intelligence Management

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/search-in-splunk-mission-control/search-in-splunk-mission-control

Search in Splunk Mission Control

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/manage-splunk-mission-control/customize-splunk-mission-control-product-settings

Manage Splunk Mission Control

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/scenarios/splunk-mission-control-scenario-library

Scenarios

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats/splunk-admin-onboarding-checklist-for-splunk-mission-control

Triage, investigate, and respond to security incidents through a modern cloud-based console in Splunk Enterprise Security.

Mission Control

Related Products

Triage, investigate and respond to potential security threats using Splunk Mission Control.

Investigate and Respond to Threats

splunk-enterprise-security-7/mission-control/investigate-and-respond-to-threats

mission-control/investigate-and-respond-to-threats

Splunk Docs

Gain end-to-end visibility, troubleshoot in real-time, and optimize performance across infrastructure, applications, and user interfaces.

Splunk Observability Cloud

Prevent disruptions and optimize operations when you monitor and analyze your IT service with predictive analytics and machine learning.

Splunk IT Service Intelligence

Collect, index, and visualize your data in the cloud for better operational intelligence.

Splunk Cloud Platform

Gain operational intelligence by collecting, indexing, and visualizing data using a powerful on-premises engine for actionable insights.

Splunk Enterprise

Streamline data onboarding, transformation, and archiving with forwarders, processors, indexes, and dozens of data source integrations.

Data Management

Detect, investigate, and respond to threats on a unified interface with Mission Control, and pair with Splunk SOAR to automate your investigation response.

Splunk Enterprise Security 8

Detect, investigate, and respond to threats with a comprehensive security solution.

Splunk Enterprise Security 7

Streamline your security operations with a SOAR system that integrates orchestration, playbook automation, and case management to enhance threat response.

Splunk SOAR

Detect threats, assess risks, and streamline investigations with Splunk Asset and Risk Intelligence, Splunk Attack Analyzer, and Splunk User Behavior Analytics.

Security Offerings

Monitor and enhance business application performance for cloud environments and IT infrastructure.

AppDynamics SaaS

Welcome to our centralized documentation portal, designed to bring you all of our product documentation in one accessible location.

About This Site

Learn from and engage with the Splunk Community, and find out how to contact customer support.

Community Support

Extend your possibilities for collecting, processing, and analyzing data from a variety sources.

Supported Add-ons

Plan, install, deploy, and upgrade your software to ensure compatibility and optimal performance for Splunk Enterprise Security.

Install

Configure, customize, and audit Splunk Enterprise Security to optimize performance, manage credentials, and maintain security.

Administer

Explore user workflows and dashboards in Splunk Enterprise Security to navigate, monitor, and manage your security operations.

User Guide

Simplify and accelerate risk detection in your security environment by leveraging unified visibility, AI-driven insights, and automated workflows.

Risk-Based Alerting

Explore tutorials and examples to solve challenges with Splunk Enterprise Security, including use cases and step-by-step scenarios.

Tutorials and Use Cases

Integrate Splunk Enterprise Security using REST API endpoints. Access endpoint information, supported HTTP methods, authentication, and more.

API Reference

View release notes and resources for Splunk Enterprise Security, including limitations, compatibility, telemetry usage, support, and third-party credits.

Release Notes and Resources

Update your security capabilities with the Splunk Enterprise Security Content Update (ESCU) for regular, relevant, and actionable threat detection content.

Security Content Update

Simplify security by deploying tailored procedures and measuring their outcomes with the Splunk Security Essentials app.

Splunk Security Essentials

Enhance the functionality and user experience of your Splunk Enterprise Security environment with additional features from apps and add-ons.

Related Apps and Add-Ons

View actionable fraud alerts related to account takeovers and new account fraud activity using the Splunk App for Fraud Analytics.

Splunk App for Fraud Analytics

Identify compliance-relevant threats in the cardholder data environment using the Splunk App for PCI Compliance.

Splunk App for PCI Compliance

Review a shared semantic model to normalize and manage data efficiently using a collection of data models, field mapping information, and examples.

Common Information Model

Apply machine learning methods such as classification, regression, anomaly detection, and outlier detection against your data through a guided interface.

Documentation