Enhanced application monitoring with 2Steps & Splunk.
Splunk's infrastructure visibility, plus 2Steps' real user journey simulation, streamed into a single Splunk view via HTTP Event Collector.
The best of both worlds for application monitoring
Pair 2Steps with Splunk for the deepest visibility available - infrastructure and log data from Splunk, plus real user journey simulation from 2Steps.
Splunk gives you deep infrastructure visibility, but it cannot simulate what a user actually experiences when they log in and try to complete a workflow.
2Steps streams test results, alerts, and video replays straight into Splunk over the HTTP Event Collector (HEC) - one unified view, no context switching.
Correlate infrastructure alerts with real user experience. Know immediately whether a Splunk alert means users are actually affected - with video proof.
Build your own dashboards and alerts
2Steps sends every test result, response time, and failure into Splunk over the HTTP Event Collector (HEC), indexed as structured events alongside your infrastructure data. Once it's in Splunk, it's just data - build the dashboards and alerts your team already knows how to build, and watch step-by-step video recordings of failures without leaving Splunk.
- Build custom Splunk dashboards on 2Steps data - pass/fail rates, response times, failures by app, region, or platform
- Set Splunk alerts directly on 2Steps events, routed through your existing on-call, ITSI, or SOAR workflows
- Watch video replays of failures in Splunk directly
- Correlated failure analysis: infrastructure + user experience
- Supports Splunk SIEM, ITSI, and Observability Cloud
Different views. One complete picture.
Splunk and 2Steps each focus on a different layer. Paired, they cover the full picture - infrastructure and the real user experience, in one place.
| Capability | Splunk | 2Steps |
|---|---|---|
| Infrastructure, logs, and web traffic visibility | ✓ | ✕ |
| Logs in and completes real workflows across Citrix, VDI, desktop, mobile, and web | ✕ | ✓ |
| Handles MFA and multi-step transactions like a real user | ✕ | ✓ |
| Video proof of exactly what the user saw | ✕ | ✓ |
| Tells you whether the cause is a server, network, or config change | ✓ | ✕ |
Together: 2Steps streams its test results and video replays straight into Splunk. Every alert now comes with an answer: is this really hitting users, or not? One connected view instead of two separate tools to check.
Hospital staff can't get into the patient record system
A nurse at a Sydney hospital tries to open a patient's record at the start of a shift. The screen loads but freezes - the record never appears. Within twenty minutes, the help desk has a dozen calls.
What Splunk Synthetics sees
The web front-end is up. Checks hit the login page and the API behind the EMR, both responding normally, response times green. From Splunk's view, the application is healthy - because at the browser and API layer, it is.
What 2Steps sees
2Steps logs in through Citrix the way the nurse does - including MFA - opens a patient record, and waits for the data to render. The record doesn't load inside the Citrix session. The test fails, and 2Steps captures video of the exact frozen screen.
What happens together
2Steps sends its video and timing into Splunk. Splunk shows the infrastructure is fine, 2Steps shows the user journey is broken inside the session - pointing straight at the Citrix layer, so the team stops chasing the wrong thing.
What our customers are saying
We were amazed at getting value from 2Steps so rapidly. The implementation was fast and it was easy to use without any previous expertise in building user transactions.
The 2Steps team are world class professionals. I'm very happy to have them as partners for years to come.
Three letters – OMG! 2Steps is something Splunk absolutely should have as part of our portfolio. I'd LOVE to incorporate this into every one of my client presentations.
We chose to work with 2Steps due to its tight integration with Splunk and flexibility to work with a variety of platforms.
2Steps is a Citrix Ready Partner providing valuable synthetic monitoring capabilities for applications being accessed via Citrix.