Documentation

Get Started

Set up and explore your self-managed Splunk Enterprise deployment to onboard, search, and visualize your data for actionable insights.

Administer

Install, administer, monitor, and troubleshoot all aspects of your Splunk Enterprise deployment.

Search

Search, transform, and analyze your data efficiently with the Splunk Search Processing Language (SPL), SPL2, and Federated Search.

Manage Knowledge Objects

Create, use, and manage event types, tags, lookups, field extractions, workflow actions, reports, views, and data models.

Leverage REST APIs

Interact with and manage your deployment and data using REST APIs designed for searches, configurations, and resource management.

Release Notes and Updates

View release notes and resources for Splunk Enterprise, including information on updating distributed Splunk Enterprise instances and the compatiblity matrix.

Create Dashboards and Reports

Explore data, export search results, and visualize key trends in the Search & Reporting app, Dashboard Studio, XML dashboards, and Analytics Workspace.

Alert and Respond

Set up alerts from saved searches and stay informed with notifications through Splunk On-Call and Splunk Mobile for timely responses to critical events.

Apply Machine Learning

Explore advanced analytics and uncover patterns with the Splunk Machine Learning Toolkit (MLTK), App for Anomaly Detection, and App for Data Science and Deep Learning.

Get Data In

Get data in to the Splunk platform with agents, Splunk-supported integrations, and developer add-ons to collect, enrich, and prepare your data for analysis.

Forward and Process Data

Get data in to your Splunk platform deployment with forwarders, then process your data with ingest actions.

Connect Relational Databases

Integrate database information with Splunk searches and reports using Splunk DB Connect, a SQL database extension for the Splunk platform.

Collect Stream Data

Capture, filter, index, and analyze live network data with Splunk Stream to uncover insights into network trends, application performance, and security threats.

Common Information Model

Extract value from and normalize data for maximum effiency using preconfigured data models from the Splunk Common Information Model (CIM).

Splunk Edge Hub

Get environmental sensor data into your Splunk platform instances without complex configurations using Splunk Edge Hub and the Edge Hub mobile app.

Apps for Mobile Devices

Stay connected with Splunk mobile products, including Splunk Mobile and Splunk Secure Gateway, for real-time data access, alerts, and collaboration on the go.