Wed Sep 25 04:55:00 UTC 2024: ## Splunk and Cisco Team Up to Enhance Security and Observability in Asia Pacific

**Singapore –** Splunk and Cisco are deepening their partnership, bringing together their respective technologies to offer enhanced security and observability solutions for enterprises across the Asia-Pacific region. This collaboration promises to simplify operations and provide a more comprehensive view of security threats and system performance.

Splunk’s global senior vice-president and general manager of products and technology, Tom Casey, highlighted the importance of a customer-centric approach to integration. He emphasized that Splunk and Cisco have been working hand-in-hand from the very beginning, integrating key Cisco observability capabilities directly into Splunk’s platform.

Within the first four months, Splunk delivered significant integrations between its AppDynamics, Splunk Observability Cloud, and the core Splunk platform, along with Splunk IT service intelligence. These integrations are not just cosmetic changes, but allow for seamless navigation between products. For example, users can start an investigation in AppDynamics or Observability Cloud and then seamlessly drill into Splunk logs without having to initiate a new search.

The integration extends to Cisco’s security suite as well. Splunk has already integrated Cisco’s Talos threat intelligence, providing direct threat information within its platform. Further integration with Cisco’s XDR is underway, promising enhanced real-time threat detection and response capabilities.

Casey emphasized the complementary roles of XDR and SIEM, stating that both are essential for effective security operations. XDR excels at early detection and containment, while SIEM provides comprehensive context. By offering both solutions, Cisco and Splunk are addressing a crucial need for holistic security.

Splunk is also investing in advanced AI capabilities to further enhance its security offerings. They are actively researching AI efficacy drift and bias detection, aiming to integrate these capabilities into existing Splunk tools as AI adoption grows.

The partnership is addressing the fragmented observability market, where numerous tools exist, making it challenging for organizations to gain a complete picture. By combining their strengths, Splunk and Cisco aim to provide a unified solution for both security and observability, promoting collaboration between security and observability teams.

Casey noted a faster adoption of Splunk Observability Cloud in Asia-Pacific compared to other regions, driven by regulatory requirements and the need for compliance in critical infrastructure industries. Companies like Singapore Airlines are already reaping the benefits of Splunk’s capabilities, embracing a culture of observability and standardization within their logging processes.

The collaboration between Splunk and Cisco is poised to revolutionize how enterprises in Asia-Pacific manage security and observability, paving the way for improved operational efficiency and enhanced protection against evolving cyber threats.

Read More