About Enterprise Security
Enterprise security includes the management and protection of data necessary to the enterprise, including infrastructure, processes, personnel, and security systems. Enterprise security requires visibility into any security-relevant threats found in your enterprise infrastructure, both in-bound and out-bound. Security practitioners need the ability to find and address root-cause questions about malicious and anomalous events throughout the IT infrastructure.
To be effective, security practitioners need to capture, monitor, and report on data from enterprise security devices, systems, and applications. With the correct information, issues are identified and security administrators can investigate and resolve security threats.
About the Splunk App for Enterprise Security
This documentation applies to the following versions of Splunk® Enterprise Security: 3.0, 3.0.1