Hopefully you’ve heard of Boss of the SOC (BOTS) and now it’s time to test your skills against the top Splunk security experts across Europe, Middle East and Africa in our first ever Virtual EMEA BOTS on Wednesday 30th September.

What is BOTS?

BOTS is a blue-team, capture-the-flag-esque (CTF) activity where participants use Splunk—and other tools—to answer a variety of questions about security incidents that have occurred in a realistic but fictitious enterprise environment. It's designed to emulate how security teams respond to real security incidents. Imagine that you’ve just been made aware of a breach. The BOTS scenario challenges participants to trace the steps that led to the incident, and determine the extent of the compromise.
We recommend teams of four are put forward to participate. If you are a "lone warrior" don't worry, we can add you to a team of other Splunk Security enthusiast.


  • Registration is required, no day-of adds due to space limitation
  • Please register with an email that you will be able to access day of the competition
  • Basic experience with Splunk
  • Contestants are encouraged to register in teams of up to four for the best experience. Each contestant must register and we'll be in touch shortly to create your team
  • Basic security investigation knowledge
  • A laptop computer equipped with WIFI and running a supported web browser
  • Please ensure teamsplunk@splunk.com and emea-events@splunk.com are added to your email safe list to get all the latest communications leading up to the competition.

How can my team prepare?

Need to brush up on your Splunk skills beforehand? No problem! Here are a few things that can help:

How will BOTS work virtually?

  • We plan to run the competition via Zoom utilising our BOTS platform and Zoom breakout rooms. We want to ensure even though you may not be sat around the same table with your fellow team members, you can communicate!
  • Download and install the Zoom Client

Tracking Fields


Event Fields

I agree to the Splunk Websites Terms and Conditions of Use.*
I agree to receive marketing communications by email, including educational materials, product and company announcements, and community event information, from Splunk Inc. and its Subsidiaries pursuant to the terms of Splunk’s Privacy Policy. I can unsubscribe at any time.

Wednesday 30 September

Register Now

Timezone Schedule:

  • 09:30 - 15:00 BST
  • 10:30 - 16:00 CEST
  • 12:30 - 18:00 GST
  • Agenda:

  • 09:30/10:30/12:30: Welcome & Introduction
  • 10:00/11:00/13:00: BOTS Competition
  • 14:30/15:30/17:30: Winners Announced 
  • What's Next?

    Upon registration you will receive a confirmation email. Please add the event to your calendar by clicking on the "add to calendar button in this email. Closer to the event you will receive intstructions and next steps to complete your team within the BOTS portal. Please use the same email you register with in this process. Log on details to the virtual platform will be sent the week before the competition.

    If you do not receive an email with your confirmation or have any further questions please email emea-events@splunk.com.

    Happy hunting and we look forward to the competition!

    Ready, Set, BOTS