Review the Use case coverage
The Use case coverage tab provides graphs to help you understand the areas in which you are delivering business outcomes, such as application monitoring, threat detection, and data analytics. The use case domains and categories are defined by Splunk Lantern. With this information, you can refine your implementation, tailoring searches and dashboards to your needs.
Use the Time comparison and Chart type drop-down menus to set your preferences for how you want to view the data. You can compare usage by day, week, month, quarter, or year.
See the following table to learn about each type of use case information that you can select:
| Panel | Description |
|---|---|
| Use case domains |
Activity in the use case domains in the currently selected time interval, compared with the activity for the previous interval. This metric shows the business areas that are most engaged with Splunk tools. A domain is a high-level class of use case types. The domains are:
Unclassified sourcetypes are those that are not currently mapped to a known domain. Use case domains can be viewed as column charts or stacked column charts. |
| Use case categories |
The total number of use case categories that are actively searched in your environment. This metric shows the diversity of Splunk usage across your organization’s functional needs. Use cases include Anomaly Detection, Security Monitoring, Threat Hunting, Compliance, Incident Management, or Troubleshooting Mission-Critical Apps, and more. This panel also includes a bar graph that shows the top 10 most active use cases in the current week, sorted by the number of capabilities linked to each use case. Use case categories can be viewed as line charts or column charts. |
The Splunk Lantern Customer Success Center has additional information about use case categories, data sources, and data types.