Questions

Does Vyrux change Splunk on its own?

No. It reads. Every change to a rule, a schedule or a parser is made by a person, through approval when your policy asks for one, and can be rolled back.

Does Vyrux need Enterprise Security?

No. It reads scheduled searches in any app. With Enterprise Security, it also reads notable events and analyst verdicts.

How often does it check?

The background scan runs every 15 minutes, even when nobody has Vyrux open. Opening Vyrux after more than 15 minutes away scans again quietly.

Why does a figure differ from Splunk?

Every figure has an i that says how it is worked out and over what time. Most differences are the time range.

Is my data sent anywhere?

Only what Chuka needs, masked first, and only when Chuka is switched on. The licence check works offline.