Gigamon and Splunk partner on federated access to network telemetry

Gigamon has announced a partnership with Splunk, a Cisco company, integrating its Deep Observability Pipeline with Splunk’s Federated Search so enterprises can analyse telemetry wherever it is stored rather than moving or duplicating it.

The two companies pitched the tie-up at a cost problem familiar to security teams: as data volumes grow across hybrid and AI-driven environments, organisations are forced to choose between rising data management costs and complete visibility. Federated access is offered as a way around that trade-off.

The Gigamon pipeline turns raw network traffic into enriched telemetry by extracting application metadata across both north-south and east-west traffic flows. Splunk’s Federated Search - a component of the Cisco Data Fabric running on the Splunk Cloud Platform - then queries those distributed datasets in place.

Customers can keep data in Splunk Cloud Platform indexes, Amazon S3, Azure Blob Storage or third-party repositories while retaining federated access across all of them, which the companies say lets enterprises balance performance, cost, compliance and data sovereignty requirements.

Gigamon claimed the combined offering gives deeper visibility into encrypted, lateral and hybrid cloud traffic, cuts cost by filtering and enriching telemetry closer to the source, and supports earlier threat detection. By integrating with Splunk’s Edge and Ingest Processors, the company said that only high-value telemetry ends up stored and searched.

“Organisations today need deeper, more connected visibility across increasingly distributed environments,” said Seth Brickman, vice-president of product management for the Splunk platform at Cisco.

“By combining Splunk’s Federated Search capabilities with network telemetry from Gigamon, we’re helping customers gain richer operational and security insights while reducing the cost and complexity of managing large volumes of data. Together, we’re delivering a more flexible and AI-ready approach to data management.”

“As data volumes continue to grow across hybrid cloud and AI-driven environments, organizations need a smarter way to manage telemetry without increasing cost or complexity,” said Srinivas Chakravarty, vice-president of cloud ecosystem at Gigamon.

“Together, the Gigamon Deep Observability Pipeline and Splunk Federated Search help customers transform raw network traffic into high-fidelity, actionable telemetry and access it wherever it resides. This approach reduces unnecessary data movement and ingestion costs while improving visibility and enabling earlier threat detection across security and observability workflows.”

The Gigamon Federated Search App, which includes pre-built processing pipelines, search templates and dashboards, is available now to joint customers through Splunkbase.