If you’ve worked with Splunk long enough, you’ve seen it: terabytes of security data, expensive infrastructure, a fully licensed Enterprise Security deployment – and half the data models are broken, the sourcetypes were never normalized, and nobody really knows whether the correlation searches are firing on complete data or not. That gap between the data you’re collecting and the insight you’re actually getting? That’s where the gold is buried. My name is Jim Baxter. I’m […]