Webinar

Micro Network Observability with eBPF and Splunk

Virtual

About this session

Modern environments generate logs, metrics, and traces, yet teams still struggle to answer basic questions during outages, security incidents, and performance investigations. What’s often missing is fine-grained visibility into service communication, latency, runtime changes, and exposure to issues like newly disclosed CVEs.

In this session, we’re exploring how eBPF-based observability fills that gap by capturing network, security, and runtime signals directly from the kernel, extending visibility beyond Kubernetes into broader infrastructure.

Using Hubble and Tetragon, we demonstrate visibility into service-to-service communication, HTTP golden signals, DNS activity, runtime events, and security-relevant behavior across your environment.


What You Will Learn:
  • What micro network observability is
  • How eBPF exposes kernel-level network, runtime, and security signals
  • How to see service communication, latency, and DNS/HTTP behavior in real time
  • How to investigate runtime behavior and CVE impact across your estate
  • How Hubble and Tetragon make this visible in practice

Modern environments generate more telemetry than ever, yet teams still struggle to understand what is happening during outages, security incidents, and performance investigations.

Learn how eBPF-powered observability provides deep visibility into network, security, and runtime behavior across modern infrastructure using Hubble and Tetragon.

September 29, 2026

Related Content

Discover more from Isovalent

  • Isovalent Runtime Security: Splunk Integration

    Learn how to integrate Isovalent Runtime Security with Splunk to create a comprehensive security observability and enforcement platform.

    In this hands-on lab, you'll deploy a vulnerable Tomcat application and use Isovalent's eBPF-based runtime security capabilities to:

    • Monitor identity-aware process and network events in real-time
    • Correlate security data with third-party CVE databases in Splunk
    • Detect and visualize CVE-2020-9484 exploitation attempts
    • Implement distributed exploit protection using Tetragon TracingPolicies
    • Analyze attack patterns and process ancestry trees in Splunk dashboards

    You'll experience the complete security lifecycle from vulnerability discovery to threat mitigation, using Vector for log shipping and Splunk's powerful analytics to gain deep insights into runtime behavior. This expert-level lab demonstrates how Isovalent and Splunk work together to provide compensating runtime controls and advanced threat detection for cloud-native environments.

  • Contact the Isovalent + Splunk team for early access

    We look forward to engaging with you around all things related to your networking, security, and observability needs. Splunk + Isovalent provides deep, eBPF-driven visibility and real-time protection across cloud workloads, eliminating blind spots while minimizing performance overhead for modern Security teams. To make our interactions as productive and tailored as possible, we kindly request that you provide us with background information about your environment.

  • Service Map

    Enable platform teams to provide self-service portal to app teams to observe their own workloads, dependencies, and flows to identify the services connecting to other services and the service calls being made.