Splunk Enterprise and Splunk Enterprise Security are Gartner-recognized leaders in the SIEM market. However, they also suffer from the same alert-overload problem as other SIEMs. Because of this, Splunk and ATA formed a partnership to provide “out of the box” integration between the ATA Platform and Splunk.

For Splunk customers, this partnership provides the best of both worlds: they can continue to benefit from Splunk’s deep monitoring, analysis and investigative capabilities, but improve overall system and employee efficiency by reducing the number of events required for investigation. This, in turn, requires fewer staff to investigate security events, which gives operations managers new flexibility in staff configuration and budget prioritization.