Splunk for the MSSP Technical Architecture

The use of managed security service providers (MSSP) continues to see an upward trend as demands for external support invariably grows. Smaller to mid-sized organizations can now keep up with the dynamic threat landscape, while larger enterprises are using managed security services to maximize their capabilities. Motivation to seek third-party support includes lack of internal resources to manage a SIEM deployment and to perform real-time alert monitoring, or lack of expertise to expand into new use cases.

Find out how you can deploy Splunk as the security analytics platform at the heart of any managed security service. This complimentary white paper describes how to architect a Splunk deployment to service customers with varying needs, including how to:

• Manage multiple customer profiles or types
• Triage alerts efficiently and escalate as appropriate
• Preempt data segregation and leakage