Splunk is a flexible tool that you can use to build your own data analysis systems – even a threat detection package. However, thanks to the pre-written Splunk Enterprise Security service, you don’t need to go to those lengths. The core of Splunk Enterprise Security is its SIEM system.