Story
Splunk
JDJD Standardizes Security Telemetry on Splunk
JD, a consumer discretionary organization in China, uses Splunk Enterprise Security from Splunk to support detection engineering for detection engineers.
JD uses Splunk Enterprise Security to turn operational signals into detections the SOC can actually use.
“Consumer Discretionary work at JD spans more than one site, even when headquarters sits in China.”
“Detection engineers asked for a shared way to run detection engineering without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Splunk Enterprise Security is the governed place detection engineers use for detection engineering |
| Risk and compliance | Fewer stalled items because security telemetry has a clear owner |
| Capability | New joiners can see how detection engineering actually runs |
Story
Consumer Discretionary work at JD spans more than one site, even when headquarters sits in China. Security telemetry was splitting across regional habits. Detection engineers asked for a shared way to run detection engineering without freezing local judgment.
Splunk (Splunk Enterprise Security) is what they standardized on. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. JD uses it as the system of record for security telemetry, with detection engineers as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
