Story
Splunk@
Canadian Natural Resources
Canadian Natural Resources Uses Splunk SOAR for Log Investigation
Canadian Natural Resources, an energy organization in Canada, uses Splunk SOAR from Splunk to support incident response for on-call engineers.
Value results
| Category | Value result |
|---|---|
| Productivity | Fewer stalled items because log investigation has a clear owner |
| Productivity | Handoffs in incident response sit in a shared queue instead of a mailbox trail |
| Capability | New joiners can see how incident response actually runs |
Story
Energy work at Canadian Natural Resources spans more than one site, even when headquarters sits in Canada. Log investigation was splitting across regional habits. On-call engineers asked for a shared way to run incident response without freezing local judgment.
Splunk (Splunk SOAR) is what they standardized on. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. Canadian Natural Resources uses it as the system of record for log investigation, with on-call engineers as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
