Veeam introduces Splunk extension to enhance security monitoring for data backups

Veeam Software, an American data backup and recovery company, has launched a Splunk extension to help customers monitor the health and security status of their backup infrastructure. This new extension, available for free to enterprises with Veeam Data Platform Advanced or Premium licences, allows customers to analyse events, monitor backup environments, and access alerts, dashboards, and reports.

In the past year, 76% of organisations experienced ransomware attacks, with 93% of these attacks targeting data backups. To reduce risk and ensure business continuity during cyber-attacks, it is crucial for a Security Information & Event Management (SIEM) solution like Splunk to detect threats across the entire system, including backups. The app now allows security professionals to monitor Veeam backup environments alongside other systems through a unified interface.

"Now security professionals can use Splunk to closely monitor their Veeam backup environments with detailed dashboards, reports, and alerts. Combatting cyber-attacks requires integration across your infrastructure, and the Veeam App for Splunk brings Veeam event data into Splunk, enabling customers to monitor security events like ransomware, accidental deletion, malware, and other threats using their current tools," said John Jester, Chief Revenue Officer at Veeam.
“This means enterprises can quickly and easily process vital monitoring and event data on their Veeam backup environments, all in one place."

The app integrates smoothly with Splunk user roles and location management. It processes events sent by Veeam Backup & Replication to the syslog server, providing features such as built-in dashboards to monitor job statuses and security events daily, built-in reports and alerts, severity level management for events and alerts, support for multiple Veeam Backup & Replication servers and data source locations, role-based permissions for locations, and app configuration backup.
 
In an earlier interview with TechCircle, Anand Eswaran, the chief executive of Veeam, said, “Data resilience involves much more than just backing up data. Factors such as data recovery speed, recovery time objective, recovery point objective, disaster recovery, data security, and de-duplication play essential roles in a robust data resilience strategy. Veeam's success is attributed to our innovative solutions that allow customers to backup, protect, and securely recover their data instantly, minimising downtime in the face of ransomware attacks or natural disasters. This level of preparedness is indispensable for every organisation.”