Story
American Express GBT Extends Splunk Observability Across Detection Engineering
American Express GBT, an industrials organization in the United States, uses Splunk Observability from Splunk to support detection engineering for detection engineers.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Splunk Observability is the governed place detection engineers use for detection engineering |
| Risk and compliance | Fewer stalled items because security telemetry has a clear owner |
| Capability | New joiners can see how detection engineering actually runs |
Story
American Express GBT did not need another dashboard that nobody opened. It needed detection engineering to move. In the United States, detection engineers already knew where security telemetry went wrong: too many copies, too little ownership, and a close process that waited on the loudest inbox.
Splunk Observability from Splunk is now in that path. Splunk (a Cisco company) is a data platform for security and observability, used to search machine data and investigate incidents. The company treats it as production tooling for detection engineering, which is why detection engineers live in it rather than exporting from it once a quarter.
American Express GBT can show how security telemetry is handled today. That is the value: a repeatable way to run detection engineering on software the rest of the industry already recognizes.