One control plane for exposure, detection, response, intelligence, PQC, and compliance. Explore platform
Splunk hybrid SOC
Keep Splunk while adopting native Sentinel and Reflex — bidirectional OCSF over the Splunk HEC connector.
The Splunk HEC connector moves OCSF events between Oryx and your existing SIEM investment. Run hybrid detection in Splunk while adopting Sentinel correlation and Reflex case automation when your team is ready.
Already running Splunk? Use the Splunk connector for a hybrid SOC while adopting native Sentinel/Reflex at your pace.
Honest positioning: typical SIEM is Splunk / point SIEM; Oryx offers native Sentinel plus the Splunk connector for hybrid SOC paths.
Hybrid SOC
Push Oryx findings and alerts to Splunk for teams that live in HEC dashboards. Pull Splunk-notable events into Sentinel for OCSF-native triage and entity timelines.
Migration path
Many customers keep Splunk for historical search while Sentinel becomes the tenant-safe detection core and Reflex handles approved response workflows.
Hybrid SOC means your analysts keep their muscle memory while the platform modernizes underneath.Axix Oryx / Splunk coexistence
Connectors + Control plane
Axix Connectors
MSSP Portfolio
Ready to connect?
See how Oryx extends your stack with OCSF-native integrations and governed automation.
Talk to a partner specialist