HackerNoon
Compare Splunk and Flink for rule-based security detection, from batch searches to real-time stream processing and alerting. https://hackernoon.com/splunk-vs-flink-which-tool-is-better-for-real-time-security-detection #splunk
Splunk vs. Flink: Which Tool Is Better for Real-Time Security Detection? | HackerNoon

Compare Splunk and Flink for rule-based security detection, from batch searches to real-time stream processing and alerting.

May 27 at 6:06amWeb
Show threadAdvanced Persistent TeapotMay 27

@hackernoon while I don't object to your conclusions, I feel like there's a big question here that hasn't been answered: why are you stipulating "real-time"?

Real-time detection is only advantageous if the situation warrants real-time response AND the organisation is capable of delivering it (namely via automation - even a 24/7 SOC is unlikely to get a response rolling in under 30 minutes if it's human-driven); otherwise you're wasting time and money. In my experience, that combination is very rare.