Welcome back to another Splunk User Group session, hosted in person in Edinburgh and online on YouTube Live.

This month's session is all about Cloud Migration, and the technical challenges migrating to Splunk Cloud.

We'll also discuss the actual data coming from Splunk, some issues that can arise from ingesting data, as well as looking at CIM and the newly announced Open Cybersecurity Schema Framework

At the end, attendees will be encouraged to bring up issues or ideas they've had with Splunk, and the rest of the attendees get involved with helping out. If you want to bring your issue to the session, please get in touch with us prior to the event so we can ensure we can help with your issue.

In Person

We will be presenting from our previous meeting space provided by Adarma Security. The traditional tech meetup Pizza and Beers/Non-Alcoholic drinks will be provided at the start of the session.

As such, Adarma would like attendees to follow the following guidance:

"Due to the risk of CoVid infections in Scotland we request that everyone attending the Splunk User Group do the following:

• Sign in upon arrival and complete the CoVid declaration.
• Take a temperature check using the automatic temperature check at Reception
• Use the hand sanitiser at Reception
• Clean hands regularly throughout the evening
• Respect other people’s personal space
• Anyone who feels unwell must not attend"

Please follow the above if you want to attend the event.

Online

We're also looking to host the session online as well on YouTube Live - Search Edinburgh Splunk User Group for our channel.

Giveaways

Thanks to Splunk, we now have a selection of prizes that will be awarded to in-person attendees throughout the year. More details will be provided at the session.

We'll also have a coupon from our sponsor JetBrains to raffle off.

Agenda

Tom Wise and Algi Tabir from Adarma will discuss their experiences with migrating to Splunk Cloud as well as some technical solutions that assisted with their migration.

Andrew McManus will follow up with a brief discussion on Data, and how 

Code of Conduct

We adopt and enforce the Berlin Code of Conduct (CoC) for all our events and all cases of abuse or harassment are dealt with swiftly and in accordance with this CoC.

Any concerns or issues should be reported to the organisers of this chapter:

Andrew McManus (andrewjohnmcmanus@googlemail.com / @Andrew McManus on Splunk Community Slack)

Tom Wise (tom.wise@adarma.com / @phanTom on Splunk Community Slack)

Contributing to the SUG

We are always looking out for new speakers or participants to this SUG. We can be contacted in many ways:

See above for our contact details as well as:

Splunk Community: Interact with us at our Splunk Community Hub page

Slack: Join up to the Splunk Community Slack at http://splk.it/slack and join us at #Edinburgh

LinkedIn: User Group LinkedIn Page