How AWS AppFabric and Splunk work together to improve your security observability of SaaS applications

This article discusses how AWS AppFabric and Splunk work together to improve security observability of SaaS applications by centralizing and normalizing audit log data from multiple SaaS apps.

Specifically, the article covers:

• How AppFabric normalizes SaaS app audit logs into the Open Cybersecurity Schema Framework (OCSF) for ingestion into Splunk
• Benefits of centralized ingestion and normalization, such as removing need for point-to-point integrations
• Using Splunk for near real-time monitoring, alerting, investigations on the normalized data
• Storing historical audit logs cost-effectively in Amazon S3 for compliance, with Splunk's Federated Search for S3
• Conclusion on optimizing security observability and storage costs across SaaS apps