Never used Splunk before, have no Splunk admins and you’ve just bought Splunk Enterprise Security? That was us, and now we're using Splunk in ways that we could've only dreamed of using IBM QRadar. In this session we’ll share our implementation story, how we worked with Splunk to accelerate our learning curve, and how we went from 0 to 3TB in 3 months with no Splunk admins. We'll also cover how Splunk allows us to onboard data sources that we couldn't with QRadar.

Speaker(s)
Nick Ho, Sales Engineer, Splunk
Ross Rutherford, Information Security Engineer, Western Union

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1264.pdf?podcast=1576909568