Join the Houston and Denver Splunk User Groups for a cross-chapter session on LogForge — an open-source synthetic event log generator built for SOC engineers, DFIR analysts, and platform operators who need realistic data to test pipelines, detections, and integrations.

Whether you're validating detection content before production, stress-testing your Splunk ingestion pipeline, or building out a lab environment without waiting on real data, LogForge gives you a programmable, API-first solution that fits directly into your workflow.

In this session, we'll walk through the core architecture and show you how to put it to work in your Splunk environment through live demos.

Topics we'll cover include:

• LogForge architecture overview and OSS feature set

• Template system deep dive — building realistic, customizable log data with Jinja2 and Faker

• Entity registry — managing and reusing synthetic entities across your test scenarios

• Connecting LogForge outputs directly to Splunk

• Live demos throughout

Agenda:

• 3:30 PM – Meet and Greet / Networking

• 4:00 PM – Presentation, Live Demos, and Q&A

• 5:00 PM – Continued Discussion

📍 Houston Location: Fulcrum HQ - 2603 Augusta Dr Suite 1325, Houston, TX 77057

📍 Denver Location: TBD/Virtual

💻 Virtual Option: Available for all

SUG - LogForge: Synthetic Log Generation for Real-World Testing | Meeting-Join | Microsoft Teams