Splunk v4.2 Released
Splunk is software that provides unique visibility across your entire IT infrastructure from one place in real time. Only Splunk enables you to search, report, monitor and analyze streaming and historical data from any source.
Splunk indexes any kind of IT data from any source in real time. Point your servers’ or network devices’ syslog at Splunk, set up WMI polling, monitor live logfiles, enable change monitoring on your filesystem or the Windows registry, or schedule a script to grab system metrics. Splunk indexes all your IT data without the need for any specific parsers or adapters to purchase, write or maintain. Both the raw data and the rich index are stored in an efficient, compressed, filesystem-based datastore with optional data signing and auditing for data integrity. The more data you index, the more insight you’ll gain from your IT infrastructure.
Changelog
- Real-time alerting – provide immediate notification and response for events, patterns, incidents and attacks as they occur.
- Universal Forwarder – new dedicated forwarder delivers secure, distributed, real-time data collection from thousands of endpoints.
- Easier and faster – new visualizations, quick start guides for new users, integrated workflows for common tasks and up to 10X faster search experience for large-scale deployments.
- Managing Splunk – new centralized deployment monitoring and centralized license management.