CloudPassage Halo App Integrates with Splunk Enterprise

Grazed from TalkinCloud. Author: Chris Talbot.

A new application from CloudPassage combines the cloud infrastructure security firm’s Halo event data with correlation and analysis from Splunk Enterprise 6 to monitor security events on both public and private cloud servers. CloudPassage Halo App for Splunk Enterprise was designed for users of both CloudPassage and Splunk to collect 80 unique security event types across cloud infrastructures, and then analyze and correlate the data with other machine data indexed within Splunk Enterprise.

According to the two companies, the new app enables end users to create unique dashboards for insights that come from pairing Halo’s "massive event data" with Splunk Enterprise’s ability correlate and analyze data. Additionally, the application provides the ability to geo-locate user login attempts and cloud computing instances on any cloud provider for additional insight and control into cloud infrastructure services…

"The CloudPassage Halo App for Splunk Enterprise provides Splunk users with rich cloud security event data that is otherwise elusive and obscured in cloud environments," said Bill Gaylord, senior vice president of Business Development of Splunk, in a prepared statement…

Read more from the source @ http://talkincloud.com/cloud-computing-security/cloudpassage-halo-app-integrates-splunk-enterprise