# Monitor Bitwarden events using Splunk for SIEM Management Learn how Bitwarden and Splunk integrate together to provide security information and event management (SIEM) for defense against malicious attacks and network breaches. --- Splunk is a security and observability tool used to provide visibility on large amounts of data for multi-cloud and on-premise deployments. The solution delivers insights on critical metrics such as uptime, anomalies, outages, suspicious activity, and more. With these cloud observability insights, Splunk can detect malicious activity and notify IT, DevOps, and SRE teams when a data security event occurs.  Bitwarden and [Splunk](https://www.splunk.com/) integrate together to provide security information and event management (SIEM) for defense against malicious attacks and network breaches. SIEM technology identifies potential threats to online applications, while also providing compliance and security management for cloud infrastructure data in near real-time. This is achieved by logging a collection of detailed events that occur across various data sources.  With Bitwarden and Splunk, detailed information on activity across password management activity can be gathered and displayed in visual dashboards for easy monitoring. Together, the two integrate to provide valuable insights into a given Bitwarden organization, including information such as user activity, password changes, shared passwords, and more. Combined with monitoring of other infrastructure, apps, and networking, Splunk provides a holistic view of company security. ![Splunk logo](https://bitwarden.com/assets/2USqwZtvVG75tQmYY3R99q/81b6378c80c884d04309eec3398b7c00/Splunk_logo.png) ## Table of Contents [The benefits of Bitwarden and Splunk together](https://bitwarden.com/en-gb/resources/monitor-bitwarden-events-using-splunk-for-siem-management/#the-benefits-of-bitwarden-and-splunk-together-include/) [Integration Details: The official Bitwarden Splunk app](https://bitwarden.com/en-gb/resources/monitor-bitwarden-events-using-splunk-for-siem-management/#integration-details-the-official-bitwarden-splunk-app/) [![SIEM Presentation Page](https://bitwarden.com/assets/7jSWKjP9o0KEUsFcaOMz8g/f639f086d1fb2eef9f20f80a685dfba4/-Public-_Introduction_to_SIEM_and_Splunk_Integration__5_.png)](https://bitwarden.com/resources/presentations/security-incident-and-event-management-siem/) ## The benefits of Bitwarden and Splunk together include - Alerts for suspicious activity and detailed reports from Bitwarden logs - Expands SIEM oversight to website and application credentials - Visual dashboards and event search macros for easy monitoring - Records of specific credential access by users - Insights into user adoption of company security tools - Offboarding reports that list credentials a former employee had access to, ensuring tighter security and access control ## Did you know? Bitwarden records more than 60 types of events that are logged in perpetuity and can be passed to Splunk for analysis and integration into existing security systems. ## Integration Details: The official Bitwarden Splunk app Bitwarden integrates easily into Splunk Enterprise self-hosted, Splunk Cloud Classic, and Splunk Cloud Victoria installations through the official Bitwarden Event Logs app available in the [user interface](https://bitwarden.com/en-gb/help/splunk-siem/#install-the-splunk-bitwarden-app/). The app entry can also be [found on Splunkbase](https://splunkbase.splunk.com/app/6592)**.**Follow the steps in the Splunk SIEM [integration documentation](https://bitwarden.com/en-gb/help/splunk-siem/) from the Bitwarden Help Center. Once your Bitwarden organization is connected to Splunk, three pre-built dashboards will populate: Authentication Events, Vault Item Events, and Organization Events. Other custom dashboards can be built to make use of this data. Alternatively, use Bitwarden API integration to set up SIEM functionality by exporting event data from your organization. [The Public API](https://bitwarden.com/en-gb/help/api/) can provide information about your organization and users. The [Vault Management API](https://bitwarden.com/en-gb/help/bitwarden-apis/#vault-management-api/) provides access to information about encrypted data and is hosted within the Bitwarden CLI client using the `serve `command on an owned endpoint. Combined, these two APIs will provide a full view of your organization and vault. ## Additional Resources - [Using Splunk with Bitwarden](https://bitwarden.com/en-gb/blog/using-splunk-with-bitwarden-password-manager/#splunk-and-bitwarden-expanding-siem-coverage/) - [Event Logs](https://bitwarden.com/en-gb/help/event-logs/) - [Event Logs in Onboarding and Succession](https://bitwarden.com/en-gb/help/onboarding-and-succession/#event-logs/) - [Splunk SIEM](https://bitwarden.com/en-gb/help/splunk-siem/) - [Bitwarden Public API](https://bitwarden.com/en-gb/help/public-api/) - [Bitwarden Vault Management API](https://bitwarden.com/en-gb/help/cli/#serve/) ## Get powerful, trusted password security now. Pick your plan. ## Personal ### Just getting started? *Get basic password management today. Always free.* [Create Free Account](https://bitwarden.com/go/start-free/) --- ### Premium **$1.65** *per month* *Billed annually at $19.80* Enjoy premium features - Integrated authenticator - File attachments - Emergency access - Phishing blocker - Security reports and more Share vault items with one other user [Create Premium Account](https://bitwarden.com/go/start-premium/) --- ### Families **$3.99** *per month* *Up to 6 users, billed annually at $47.88* Secure your family logins - 6 premium accounts - Unlimited sharing - Unlimited collections - Organisation storage Share vault items between six people [Start Free Families Trial](https://bitwarden.com/go/start-families-trial/) --- Pricing shown in USD and based on an annual subscription. Taxes not included. ## Business ### Teams *For teams and growing companies that need to move quickly.* **$4** *per month / per user, billed annually* **No compromise** All Premium features, plus advanced capabilities such as: - Share credentials securely - Audit activity with event logs - Synchronise your existing directory - Automate provisioning with SCIM [Start Free Trial](https://bitwarden.com/go/start-teams-trial/) --- ### Enterprise *For businesses that need advanced protection and control.* **$6** *per month / per user, billed annually* **Maximum protection** All Premium and Teams features, plus enterprise-level capabilities such as: - Granular access control - Passwordless SSO integration - Easy account recovery - Flexibility to self-host - Access Intelligence risk remediation [new] - Free Families plan for all users [Start Free Trial](https://bitwarden.com/go/start-enterprise-trial/) --- ### Talk to Sales *For large organisations, talk to an expert about a tailored plan and learn how Bitwarden can:* *per month* - Reduce cyber security risk - Boost productivity - Integrate seamlessly Bitwarden scales with businesses of any size to bring password security to your organisation [Talk to Sales](https://bitwarden.com/talk-to-sales) --- Pricing shown in USD and based on an annual subscription. Taxes not included.