Veeam Announces Splunk Extension for Monitoring Backup Infrastructure Health, Security

Veeam Software has announced the availability of a Splunk extension that allows Veeam Data Platform customers to monitor the health and security status of their Veeam backup infrastructure.

With the Veeam App for Splunk, security professionals can monitor their Veeam backup environments using the capabilities of Splunk, a security information and event management (SIEM) solution, Veeam said in a Tuesday (July 23) press release.

“Veeam is focused on powering data resilience for every customer, and this includes tight integration with leading security platforms,” John Jester, chief revenue officer at Veeam, said in the release. “Now security professionals can use Splunk to closely monitor their Veeam backup environments through detailed dashboards, reports and alerts.”

The Veeam App for Splunk integrates with Splunk user roles and location management, and processes events sent by Veeam Backup & Replication to the syslog server, according to the release.

The app also provides Splunk users with severity level management for events and alerts, multiple data source locations support, role-based permissions for locations and app configuration backup, the release said.

This new offering arrives at a time when 76% of organizations said they suffered a ransomware attack in the last year, and 93% of those attacks targeted an organization’s data backups, per the release.

“Combatting cyberattacks requires integration across your infrastructure, and the Veeam App for Splunk brings Veeam event data into Splunk, enabling customers to monitor security events like ransomware, accidental deletion, malware and other cyber threats using their current tools,” Jester said in the release.

Splunk was recently acquired by networking behemoth Cisco, with the $28 billion deal closing in March. The announcement of the acquisition was originally made in September 2023 and was followed by months of anticipation.

When announcing the deal, Cisco said the acquisition was designed to help clients bolster their security and observability efforts via artificial intelligence (AI).

Cisco and Splunk offer “complementary capabilities in AI, security and observability,” helping make companies more secure and digitally resilient, Cisco said at the time.

“From threat detection and response to threat prediction and prevention, we will help make organizations of all sizes more secure and resilient,” Cisco CEO Chuck Robbins said.