Unlock the power of Splunk SIEM for comprehensive log analysis. Collaborate and innovate with our Splunk Log Analysis Projects on GitHub

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

Collection of Dashboards for Threat Hunting and more!

Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook

A powerful home-lab focused on setting up Splunk SIEM and real-world use cases. If you’re interested to become SOC Analyst(Tier 1/2) , this lab will help you with SOC tools, rules, queries, apps and integration.

The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.

Plot relationships between objects with force directed graph based on ThreeJS/WebGL.

This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server

Syntax highlighting for Splunk .conf files in Sublime Text 2 & 3

collectd

A NLog target for Splunk Http Event Collector (HEC) Sender

A structured logging framework for .NET that supports log aggregation, e.g. Splunk

A log4net appender for Splunk Http Event Collector (HEC) Sender

writeup about sending Logstash data to Splunk using the HTTP Event Collector

This library is an abstraction for Splunk-related development, maintenance, or migration operations. It provides a single CLI or SDK to conveniently perform various operations such as managing a local development container, retrieving sample-data, building applications, comparing instances, managing knowledge objects and much more in the future.

splunk regex basics-to-advanced

a useful tutorial about splunk and security splunk app

Configuration files for create a tiered deployment server

QNAP Add-on for Splunk

Get insights into your Facebook Messenger activity with Splunk