Overview

The Splunk App for PCI Compliance provides the compliance practitioner with visibility into compliance-relevant threats found in the cardholder data environment (CDE). Through the use of Splunk's unique and powerful search correlation and reporting capabilities, the Splunk App for PCI Compliance provides a top-down and bottom-up view of an organization's current PCI compliance status. A PCI compliance practitioner can effectively monitor, investigate, and report on current Payment Card Industry Data Security Standards (PCI DSS) compliance.

The Splunk App for PCI Compliance is built on the Splunk Operational Intelligence platform and leverages Splunk's native search and correlation capabilities, allowing PCI compliance practitioners to capture, monitor, and report on data from devices, systems, users, and applications in the cardholder data environment. As issues are identified, analysts can quickly investigate and resolve compliance issues.

What is covered here

This manual covers using and administering the deployment of the Splunk App for PCI Compliance to support monitoring of the systems, applications, and devices in the cardholder data environment.

Note: This manual assumes that you are an advanced Splunk user and already know how to install, configure, and administer Splunk. For more detailed information about Splunk itself, see the Splunk Enterprise documentation.

Documentation

This manual is intended for PCI compliance practitioners and analysts who are responsible for monitoring, reporting, and investigating PCI DSS compliance status in cardholder data environments. For additional information see the following documents:

• Installation and Configuration Manual: This manual describes how to plan your PCI Compliance deployment, and then install and configure the Splunk App for PCI Compliance.

• Data Source Integration Manual: Describes how to add custom data sources to Splunk for use with the Splunk App for PCI Compliance. Includes a list of the predefined data sources supported by Splunk

• Release Notes: What's new in this release; features and new functionality.