EVENT

EMEA Splunk Boss of the SOC 2026

Register now

We are excited to be running our flagship Boss of the SOC (BOTS) event in multiple cities across EMEA.

What is BOTS?

BOTS is a blue-team capture the flag-esque competition. As a contestant, you will explore and investigate realistic event data in Splunk Enterprise and Splunk Enterprise Security. During this EMEA wide competition on Wednesday 25^th March you will practice your security skills and compete against peers for prizes and bragging rights. Players will be given a series of questions of varying type and difficulty and points are awarded for both accuracy and speed. Competitors will gain a stronger and more realistic understanding of their strengths regarding incident investigations. In addition, the results will highlight areas for training and education.

The Scenario

We are proud to present BOTS .v10 with tales of a new fictional adversary. BOTS .v10 will encompass all the things that our competitors have come to expect and love. In this blue-team, CTF(ish) event, competitors will play once again as Alice Bluebird, a security analyst protecting her organization, Frothly, against a new APT group that will be unveiled.

Registration is now Closed

Racing the clock and other contestants, you’ll answer a series of questions, Jeopardy-style — both speed and accuracy earn you points. Use Splunk Enterprise and premium Splunk products to practice your security and troubleshooting skills and see how you’d handle a real-world incident investigation like this one.

Who knows? You might even earn some bragging rights.

How Can I Prepare?

• Take a spin on previous BOTS versions, workshops, and other Splunk security focused content on https://bots.splunk.com.
• Check out our "Hunting With Splunk" blog series. Mastering the topics covered in this series will help you answer questions faster.

Take advantage of the Free Splunk Security Training

We look forward to having you and your team compete for a chance to be crowned EMEA BOTS champions! Check the drop down list to find your nearest city!

Fine Print

• There's always something, isn’t there? In addition to registering on this website, you will also be required to register on the BOTS portal ahead of the event. No game-day registration is allowed.
• After registering for BOTS on this site, you will receive a confirmation email inviting you to enroll in the BOTS event. It is vital you do this in order to be able to access the scenario and play. 
• To register, you will need a Splunk account. If you do not have one, the login process will prompt you to create one. 
• Once enrolled on the EMEA BOTS page, you can create your team, or join an existing team.
• Please note that event times may differ per location