Gigamon and Splunk Partner for AI-ready Distributed Data Access

Enterprise security and IT teams face a growing dilemma: as telemetry volumes explode across hybrid cloud and AI-driven environments, they must choose between rising data management costs and full operational visibility. The new partnership between Gigamon and Splunk, a Cisco company, removes that tradeoff by enabling federated access to high-fidelity telemetry wherever it resides.

The Gigamon Deep Observability Pipeline integrates with Splunk Federated Search to deliver unified visibility across distributed environments.

What was announced

On June 1, 2026, Gigamon announced a strategic partnership with Splunk, a Cisco company, combining the Gigamon Deep Observability Pipeline with Splunk Federated Search, a core component of the Cisco Data Fabric powered by the Splunk Cloud Platform. The integration enables enterprises to query and analyze distributed telemetry in place, without centralizing or duplicating data.

The Gigamon Federated Search App includes pre-built processing pipelines for Splunk Edge and Ingest Processor, federated search templates, and unified dashboards. The solution is available today to joint customers through Splunkbase.

Organizations today need deeper, more connected visibility across increasingly distributed environments. By combining Splunk Federated Search capabilities with network telemetry from Gigamon, we are helping customers gain richer operational and security insights while reducing the cost and complexity of managing large volumes of data

Why this matters

For CIOs, CISOs, and procurement leaders, the partnership reframes the economics of observability and SIEM. According to Gartner, by 2030, 90 percent of new SIEM purchases will mandate federated data and content-first architectures, rejecting closed ecosystems and proprietary data stores.

The 2026 Hybrid Cloud Security Survey of more than 1,000 security and IT leaders found that 79 percent are considering repatriating public cloud data to private cloud environments due to security concerns, while 72 percent believe data lakes offer stronger security controls. The Gigamon and Splunk integration aligns directly with this shift, giving customers the freedom to choose where data resides while preserving unified analytics.

As data volumes continue to grow across hybrid cloud and AI-driven environments, organizations need a smarter way to manage telemetry without increasing cost or complexity. Together, the Gigamon Deep Observability Pipeline and Splunk Federated Search help customers transform raw network traffic into high-fidelity, actionable telemetry and access it wherever it resides

Technical details

• Deep Observability Pipeline: extracts and enriches application metadata across North-South and East-West traffic flows.
• Splunk Federated Search: queries distributed datasets in place, eliminating unnecessary data movement.
• Flexible storage: data can reside in Splunk Cloud Platform indexes, Amazon S3, Azure Blob Storage, or other third-party repositories.
• Edge and Ingest Processors: process, route, filter, and enrich telemetry closer to the source.
• Gigamon Federated Search App: pre-built pipelines, search templates, and unified dashboards.
• Outcomes: visibility into encrypted and lateral traffic, lower ingestion costs, earlier threat detection, stronger compliance readiness.

Softprom and Gigamon

Softprom is the official distributor of Gigamon. Our team helps enterprises design, deploy, and operationalize the Gigamon Deep Observability Pipeline together with SIEM and observability platforms such as Splunk.

This content was prepared as part of the Softprom DistriFlow project — an automated system for monitoring and adapting vendor news. Original source: original article.