Story
Splunk
OptimizelyOptimizely Brings Security Telemetry onto Splunk
Optimizely, an information technology organization in the United States, uses Splunk SOAR from Splunk to support detection engineering for detection engineers.
A Splunk SOAR rollout at Optimizely took detection engineering out of inboxes and into a named queue.
“Information Technology work at Optimizely spans more than one site, even when headquarters sits in the United States.”
“Detection engineers asked for a shared way to run detection engineering without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Productivity | Handoffs in detection engineering sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Fewer stalled items because security telemetry has a clear owner |
| Risk and compliance | Splunk SOAR is the governed place detection engineers use for detection engineering |
Story
Information Technology work at Optimizely spans more than one site, even when headquarters sits in the United States. Security telemetry was splitting across regional habits. Detection engineers asked for a shared way to run detection engineering without freezing local judgment.
Splunk (Splunk SOAR) is what they standardized on. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. Optimizely uses it as the system of record for security telemetry, with detection engineers as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
