How to find answers and get help with Splunk Enterprise Security

Questions and resources for the Splunk platform

• Support and resources for Splunk Enterprise
• Splunk Answers
• The #splunk IRC channel on EFnet (http://chat.efnet.org/)

Questions about Splunk Enterprise Security

• For a list of recommended courses on Splunk Enterprise Security, see Education Courses for Enterprise Security Customers.
• The Splunk Enterprise Security documentation
• Splunk Answers posts about Splunk Enterprise Security

Support for Splunk Enterprise Security

• For assistance installing, upgrading, or scaling a Splunk Enterprise Security deployment, contact the Splunk Professional Services team.
• For assistance on a support issue with Splunk Enterprise Security, file a case using the Splunk Support Portal.

Support for Splunk Enterprise Security and provided add-ons

Splunk Enterprise Security is a premium app that supports additional add-ons to make it easier for you to add data to your Splunk deployment. Support for Splunk Enterprise Security is different from the support for the add-ons that help you get data in.

• The add-ons that include "SA-" or "DA-" in the name make up the Splunk Enterprise Security framework. These add-ons are supported in accordance with the Purchased Software with Active Support Subscription section of the Splunk Software Support Policy. See Splunk Software Support Policy.
• The rest of the add-ons include "TA-" in the name and are technology-specific and provide the CIM-compliant knowledge necessary to incorporate that source data into Enterprise Security. These add-ons are available for your convenience and are supported differently than the add-ons that make up the Splunk Enterprise Security framework. See the Splunk Extensions section of the Splunk Software Support Policy. See Splunk Software Support Policy.