Boss of the NOC and SOC Competitions
.conf19 | October 21–24, 2019 | The Venetian and Sands Expo | Las Vegas

Join us for our famous Boss of the SOC (BOTS) and Boss of the NOC (BOTN) competitions at .conf19. Played individually or in teams of up to four, BOTS and BOTN are competitions that have teams pivoting through realistic data using Splunk Enterprise Security or Splunk ITSI. All are welcome — from Splunk noobs to experts! Register today for .conf19 to be eligible to compete.

October 21, 2019
Boss of the NOC

Registered .conf19 attendees are invited to join the Splunk IT operations analytics team for the Boss of the NOC (BOTN) competition at .conf19. During the BOTN competition, you'll show off your Splunk-Fu and compete against your peers for prizes and bragging rights. See below for event details for your chance to become the Boss of the NOC!

The Scenario

Competitors will role play as an IT operations-focused analyst who is supporting a multiple-organization operational team to triage, remediate and resolve a variety of P1, P2 and P3 episodes (which you may know as incidents or outages). You'll work in teams of up to 4 to do this as quickly as possible using your Splunk Ninja skills in Splunk Enterprise, Splunk ITSI and other technologies you'll have at your fingertips (more to come on that soon)!

There are many paths to victory, and time is of the essense. Some problems are easy, some are hard... the harder the problem and the more quickly you solve it, the more points you'll get! Have your team solve as much as you can while racing the clock to earn as many points as possible to earn the coveted title as our .conf19 BOSS of the NOC.

Who Should Play

BOTN is the best place to see where you stand, understand how you can improve, and learn from the Splunk ITOps team. Regardless of your Splunk ability, from n00b to guru, you’ll be able to spend time working through fun problems and network with fellow attendees. If you have the curiosity and desire you should play! There is something for everyone.

If you are registered for .conf19 and interested in participating in BOTN, sign up here.
October 21, 2019
Boss of the SOC

Registered .conf19 attendees are invited to join the Splunk security team for the Boss of the SOC (BOTS) competition at .conf19. During the BOTS competition, teams will use their Splunk and security knowledge to compete against their peers for respect, bragging rights and the title of .conf19 BOSS of the SOC. See below for event details for your chance to become the Boss of the SOC!

The Scenario

You will role play as the quirky Security Analyst "Alice Bluebird," who is helping Frothly, a thriving home brewing supply company. Thanks to Alice, Frothly continues to thrive in spite of constant nation-state attacks and has big plans to innovate and expand, which they’ll quickly learn comes with a whole new set of challenges.

Alice must continue to expand her knowledge of cloud, as well as on-premises windows/Linux hosts, firewalls and even ICS/SCADA data all while building a team to improve and streamline Frothly’s defenses. Contestants will pivot through realistic data using Splunk’s analytics-driven security platform and the wild, wild web. All this while racing the clock to identify the who, how and where through a full forensic investigation.

You will be given a series of questions of varying types and difficulties, with scoring based on timeliness and difficulty. Get ready to use your usual Splunk hunting techniques to once again prevail in the detection of evil in the data, and emerge victoriously.

Who Should Play

BOTS is the best place to see where you stand, understand how you can improve, and learn how to investigate real-world incidents in a safe, fun, and competitive environment. If you have the curiousity and desire, you should play! The event is open to all levels.

Unfortunately, BOTS is full. However, you can still try your luck at the BOTS Lottery.
Which one should I attend?

Boss of the NOC

Boss of the SOC

Solution Area

IT Operations Security, Compliance and Fraud

Day and Time

Monday, October 21 7:00pm–Midnight Monday October 21 7:00pm–Midnight


Venetian Hotel, Level 5 Venetian Hotel, Level 5

Contact Information

Contact the BOTN team at Contact the BOTS team at
Be the Boss at Splunk .conf19

Let the games begin! Join hundreds of your peers at .conf19 for the Boss of the SOC and Boss of the NOC events, Splunk’s competitive event for security and network operations teams. Splunk your way through the data to find answers to more than one hundred questions in this jeopardy-style capture-the-flag event. Still not convinced? Check out the highlight reel from last year’s event and meet the Splunkers behind the competitions.


Take a Peek