On-premises and cloud SIEM platform with advanced analytics, threat intelligence, and orchestration capabilities. BullWall forwards OCSF-formatted Security Findings and Incident Findings via syslog (UDP/TCP) or HTTP Event Collector. Splunk provides the long-term event retention, correlation, and hunting layer for BullWall telemetry.