Case Study: Splunk achieves faster threat hunting and incident response with Gravwell

How easy it is to transition from Splunk and deploy Gravwell as a replacement data platform

Splunk tasked Gravwell with providing its data analytics platform to the SCinet Network Security team to protect a massive, high-performance network built for the SC18 conference. The challenge was to secure a $52 million infrastructure with 4.02 terabits per second of external capacity, a task that required protecting the network from the internet and the internet from the potential threats originating from within the network's immense power.

Gravwell successfully met this challenge by ingesting and analyzing over 1TB of data from multiple sources. Their platform automated tedious security tasks and enabled the team to quickly investigate a sophisticated attack, reducing response time from the industry average of 206 days down to minutes. By leveraging Gravwell, the security team automatically blocked numerous internet attacks and was freed to focus its efforts on a major threat, ultimately preventing a significant attack against an external SaaS company.

Splunk