Veeam Software has announced a Splunk extension that allows Veeam Data Platform customers to monitor the health and security status of their Veeam backup infrastructure using Splunk capabilities.
Free for enterprises with Veeam Data Platform Advanced or Premium licenses, the app enables Splunk customers to analyse Veeam events, monitor Veeam backup environments and provides access to alerts, dashboards and reports.
Seventy-six percent of organizations suffered a ransomware attack in the last year. Unfortunately, 93% of those attacks explicitly targeted an organisation’s data backups.
To reduce organisational risk and ensure business continuity when a cyber-attack occurs, it’s important to ensure an organization’s Security Information & Event Management (SIEM) solution (like Splunk) catches cyberthreats in any and every part of their system, including backups.
Now, with Veeam App for Splunk, security professionals can monitor their Veeam backup environments in the same single pane of glass as their other source environments with detailed dashboards, reports, and alerts.
“Veeam is focused on powering data resilience for every customer and this includes tight integration with the leading security platforms,” says John Jester, chief revenue officer at Veeam. “Now security professionals can use Splunk to closely monitor their Veeam backup environments through detailed dashboards, reports and alerts.
“Combatting cyber-attacks requires integration across your infrastructure, and the Veeam App for Splunk brings Veeam event data into Splunk, enabling customers to monitor security events like ransomware, accidental deletion, malware and other cyber threats using their current tools.
“It means enterprises can quickly and easily process vital monitoring and event data on their Veeam backup environments, in the same single pane of glass as other source environments they may be monitoring.”
The app integrates with Splunk user roles and location management. This new Splunk App processes events sent by Veeam Backup & Replication to the syslog server and provides Splunk users with the following features:
* Built-in dashboards to monitor job statuses and security events on a daily basis.
* Built-in reports and alerts.
* Severity level management for events and alerts.
* Multiple Veeam Backup & Replication servers support.
* Multiple data source locations support.
* Role-based permissions for locations.
* App configuration backup.