For every large enterprise, most security issues happen from an internal device rather than an external device connected remotely.
Problem:
Large enterprises had an issue with BYOD (bring your own device) since they were not able to ensure that these devices had Splunk logging software installed on them.
Solution:
In conjunction with the QP and PureInsight, they collected large amounts of network traffic, determined the top talkers in the network, and determined the application being used. Using the QP’s API, they could integrate it into Splunk and their existing traffic monitoring dashboards.
The result is that they were able to visualize their network’s top talkers, consolidate all the traffic information, and integrate with their existing dashboard setup.