Splunk for Security: SSE - Data Availability

This video focuses on the data availability features of Splunk Security Essentials, which help organisations monitor and address latency issues in their data sources. It begins by demonstrating how to navigate to the data availability dashboard and initialise its machine learning model for latency analysis. The video explains the process of running a baseline search to build this model, enabling the dashboard to detect and display any latency problems within the data inventory. By refreshing the page after the model is built, users can access real-time insights into data delays and take proactive steps to ensure consistent data flow.

To gain a comprehensive understanding of data latency trends, the video highlights the importance of scheduling the machine learning model search. This is achieved by configuring scheduled searches in the app settings, ensuring continuous monitoring and more accurate latency tracking over time. By leveraging these tools, organisations can optimise their Splunk environment for reliability and performance.