Monitoring Bucket Health in Splunk Enterprise

<!DOCTYPE HTML> <html lang="en"> <head>  <meta charset="UTF-8"/> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="X-UA-Compatible" content="IE=Edge"/> <title>Monitoring Bucket Health in Splunk Enterprise | Splunk</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"/> <meta name="description" content="Splunker Matteo Palarchio explains how small buckets can have a big impact on Splunk Enterprise performance."/> <meta name="google-site-verification" content="FkgQj_Q2EMJDeZ-2L2s3ZUkxjg4IBuH3r22EhfJgsgw"/>  <meta property="og:type" content="website"/> <meta property="og:url" content="https://www.splunk.com/en_us/blog/platform/monitoring-bucket-health-in-splunk-enterprise.html"/> <meta property="og:title" content="Monitoring Bucket Health in Splunk Enterprise | Splunk"/> <meta property="og:description" content="Splunker Matteo Palarchio explains how small buckets can have a big impact on Splunk Enterprise performance."/> <meta property="og:image" content="https://www.splunk.com/content/dam/splunk-blogs/images/en_us/2024/06/monitoring-bucket-health-hero.jpg"/> <meta property="og:site_name" content="Splunk"/> <meta property="og:locale" content="en_US"/>  <meta name="twitter:card" content="summary"/> <meta name="twitter:title" content="Monitoring Bucket Health in Splunk Enterprise | Splunk"/> <meta name="twitter:description" content="Splunker Matteo Palarchio explains how small buckets can have a big impact on Splunk Enterprise performance."/> <meta name="twitter:image" content="https://www.splunk.com/content/dam/splunk-blogs/images/en_us/2024/06/monitoring-bucket-health-hero.jpg"/> <meta name="twitter:URL" content="https://www.splunk.com/en_us/blog/platform/monitoring-bucket-health-in-splunk-enterprise.html"/> <link rel="canonical" href="https://www.splunk.com/en_us/blog/platform/monitoring-bucket-health-in-splunk-enterprise.html"/>  <meta name="application-name" content="Splunk"/> <meta name="msapplication-TileColor" content="#FFFFFF"/> <link rel="preconnect" href="https://www.google-analytics.com"/> <link rel="preconnect" href="https://www.googletagmanager.com"/> <link rel="preconnect" href="https://geolocation.onetrust.com"/> <link rel="dns-prefetch" href="https://www.google-analytics.com"/> <link rel="dns-prefetch" href="https://www.googletagmanager.com"/> <link rel="dns-prefetch" href="https://geolocation.onetrust.com"/> <script> var splunkMeta = {"site":{"language":"en","environment":"production","siteName":"splunk-blogs"},"page":{"modifiedDate":"07-15-2024","originalPublishDate":"07-16-2024","freeSplunkButton":"/en_us/download/splunk-cloud.html","blogAuthorName":"Matteo Palarchio","blogCategory":"Platform","blogBylineDate":"July 16, 2024","campaignGroup":"N/A","containForm":"no","pageOwner":"N/A","urlPath":"https://www.splunk.com/en_us/blog/platform/monitoring-bucket-health-in-splunk-enterprise.html","productArea":"N/A","blogPromoCard":"Default (Digital Resilience)","template":"Splunk WWW - Blogs Detail Page Template"}};</script> <script type="application/ld+json">{"@context":"https://schema.org","type":"WebSite","url":"https://www.splunk.com/","potentialAction":{"type":"SearchAction","target":"http://www.splunk.com/en_us/search.html?query={search_term_string}","query-input":"required name=search_term_string"}}</script>  <link rel="apple-touch-icon-precomposed" sizes="57x57" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-57x57.png"/> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-114x114.png"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-72x72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-144x144.png"/> <link rel="apple-touch-icon-precomposed" sizes="60x60" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-60x60.png"/> <link rel="apple-touch-icon-precomposed" sizes="120x120" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-120x120.png"/> <link rel="apple-touch-icon-precomposed" sizes="76x76" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-76x76.png"/> <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/content/dam/splunk2/images/icons/favicons/apple-touch-icon-152x152.png"/> <link rel="icon" type="image/png" href="/content/dam/splunk2/images/icons/favicons/favicon-196x196.png" sizes="196x196"/> <link rel="icon" type="image/png" href="/content/dam/splunk2/images/icons/favicons/favicon-96x96.png" sizes="96x96"/> <link rel="icon" type="image/png" href="/content/dam/splunk2/images/icons/favicons/favicon-32x32.png" sizes="32x32"/> <link rel="icon" type="image/png" href="/content/dam/splunk2/images/icons/favicons/favicon-16x16.png" sizes="16x16"/> <link rel="icon" type="image/png" href="/content/dam/splunk2/images/icons/favicons/favicon-128.png" sizes="128x128"/> <link rel="shortcut icon" type="image/x-icon" href="/content/dam/splunk2/images/icons/favicons/favicon.ico"/> <meta name="msapplication-TileImage" content="/content/dam/splunk2/images/icons/favicons/mstile-144x144.png"/> <meta name="msapplication-square70x70logo" content="/content/dam/splunk2/images/icons/favicons/mstile-70x70.png"/> <meta name="msapplication-square150x150logo" content="/content/dam/splunk2/images/icons/favicons/mstile-150x150.png"/> <meta name="msapplication-wide310x150logo" content="/content/dam/splunk2/images/icons/favicons/mstile-310x150.png"/> <meta name="msapplication-square310x310logo" content="/content/dam/splunk2/images/icons/favicons/mstile-310x310.png"/> <script> window.dataLayer = window.dataLayer || []; var reactComponents = []; </script> <style>.async-hide { opacity: 0 !important} </style> <script>(function(a,s,y,n,c,h,i,d,e){s.className+=' '+y;h.start=1*new Date; h.end=i=function(){s.className=s.className.replace(RegExp(' ?'+y),'')}; (a[n]=a[n]||[]).hide=h;setTimeout(function(){i();h.end=null},c);h.timeout=c; })(window,document.documentElement,'async-hide','dataLayer',4000, {'GTM-N4QZZ4H':true});</script> <script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','https://www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-399680-1', 'auto', {allowLinker: true}); ga('require', 'GTM-N4QZZ4H'); </script>  <script> (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl+ '';f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-TPV7TP'); </script>  <link rel="stylesheet" href="/etc.clientlibs/splunk/core/clientlibs/clientlib-site.6cf6b773cea3b494e018fcf80a4e51b1.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/clientlibs/clientlib-blogsDetailPage.115e84f80884ee0ec6ee3b52821cc1a2.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/clientlibs/clientlib-grid.083db1b81a5418f832a6c9e1dafbcb98.css" type="text/css"> <script class="optanon-category-2" type="text/plain" src="//cdn.bizible.com/scripts/bizible.js" async="true"></script> <style> @media (max-width: 767px) { .heroForeground-left-section.heroInfoSection { grid-row-start: 2 !important; grid-row-end: 3 !important; } .hero-container.blogs-hero-container .heroForeground-Section { row-gap: 14px !important; } .hero-container.blogs-hero-container .heroForeground-Section .heroForeground-left-section { row-gap: 14px !important; } .hero-container .heroForeground-right-section { padding-top: 0px !important; grid-row-start: 1 !important; grid-row-end: 2 !important; } } </style> <script type="text/javascript"> var siteConfig= {"loginUrl":"/saml/login","logoutUrl":"/api/bin/sso/logout?module=sso_logout","splunkSubSignUp":"https://www.splunk.com/page/sign_up","eulaCheck":"/bin/splunk/eulaservices","authCheckUrl":"/api/bin/user/info","activityUrl":"/api/bin/user/dlactivity","ajax_sendtoeloqua":"/index.php?module=users&func=ajax_sendtoeloqua","cloudtrial":"/api/bin/product/cloudtrial","calculator":"/bin/splunk/create-calculator","eulaservices":"/api/bin/splunk/eulaservices","ucd_endpoint":"/api/bin/splunk/ucd","contact_endpoint":"/api/bin/lead/contact","location_endpoint":"/api/bin/user/location","user_info_endpoint":"/api/bin/user/info"}; </script> <script type="text/javascript"> var featureFlagMktoRestEnable = {"mktoRestEnable": true}; </script> <script type="text/javascript"> var featureFlagWebApiHostEnable = {"webApiHostEnable": false}; </script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-jquery.5e4de0586c10f61b78f77ee20daf7431.js"></script> <script> !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e||self,function(){var n=e.Cookies,r=e.Cookies=t();r.noConflict=function(){return e.Cookies=n,r}}())}(this,function(){"use strict";function e(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var t={read:function(e){return e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,decodeURIComponent)}};return function n(r,o){function i(t,n,i){if("undefined"!=typeof document){"number"==typeof(i=e({},o,i)).expires&&(i.expires=new Date(Date.now()+864e5*i.expires)),i.expires&&(i.expires=i.expires.toUTCString()),t=encodeURIComponent(t).replace(/%(2[346B]|5E|60|7C)/g,decodeURIComponent).replace(/[()]/g,escape),n=r.write(n,t);var c="";for(var u in i)i[u]&&(c+="; "+u,!0!==i[u]&&(c+="="+i[u].split(";")[0]));return document.cookie=t+"="+n+c}}return Object.create({set:i,get:function(e){if("undefined"!=typeof document&&(!arguments.length||e)){for(var n=document.cookie?document.cookie.split("; "):[],o={},i=0;i<n.length;i++){var c=n[i].split("="),u=c.slice(1).join("=");'"'===u[0]&&(u=u.slice(1,-1));try{var f=t.read(c[0]);if(o[f]=r.read(u,f),e===f)break}catch(e){}}return e?o[e]:o}},remove:function(t,n){i(t,"",e({},n,{expires:-1}))},withAttributes:function(t){return n(this.converter,e({},this.attributes,t))},withConverter:function(t){return n(e({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(o)},converter:{value:Object.freeze(r)}})}(t,{path:"/"})}); if(Cookies.get('WEBID')===undefined && Cookies.get('fed.IsLoggedIn')==='1' && Cookies.get('wcmmode')===undefined && document.getElementById("sharedglobalheader")===null){ window.location.href= "/saml/login?redirecturl="+encodeURIComponent(window.location.href); } </script> <script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script> <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="M7Q82-FTRNS-TEZ4E-UCSZ2-NQJ9C",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"M7Q82-FTRNS-TEZ4E-UCSZ2-NQJ9C";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="bdpnbeqxhoukcz5r5vva-f-8230e028d-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"640520","ak.ai":parseInt("418654",10),"ak.ol":"0","ak.cr":1,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"2a4506e","ak.r":45578,"ak.a2":n,"ak.m":"a","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":42164,"ak.gh":"23.59.168.157","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1739713898","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==8aW/BmAmh5QMq9r48aQr+4ucS1jw+DsgUo3g7vlSoxMSoRM2sNK7eBYMoZZ6mUBlZdgtWba/aGOQ2pl/fKdE5TVzFxTqCHILzTTdeQqRwAlCi1CHJYa9eW7RGPyXdxnWaDykVVm9SfPQtsLnhizvPlOeBbAo3XSoI2K8P8r2bFThzixvqwQ/0bbex52qjYDiEH+Ib38cI8m6+KTqNSQWpH9EFbLci6RxnzJcvdXVY2/UbcTwD+d3oGZvWIOZyJQ+ZQ9tCgai45O5cYkOLC9xka0vtOymN3bpFw7SIhiYg3G7v4gu5zjkTAdNfo8e2U7BIvqUSRTvgACrlVvNjqP1rx0OwAyJTe1gz8XS57dCBLBZOQYC/8RI8vUF5kL6yoIKnzfWVgm682rPMhqejdU7tX+3iJVcbmfr4GYAlDluLEc=","ak.pv":"265","ak.dpoabenc":"","ak.tf":i};if(""!==t)o["ak.ruds"]=t;var r={i:!1,av:function(n){var t="http.initiator";if(n&&(!n[t]||"spa_hard"===n[t]))o["ak.feo"]=void 0!==e.aFeoApplied?1:0,BOOMR.addVar(o)},rv:function(){var e=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(e)}};BOOMR.plugins.AK={akVars:o,akDNSPreFetchDomain:a,init:function(){if(!r.i){var e=BOOMR.subscribe;e("before_beacon",r.av,null,null),e("onbeacon",r.rv,null,null),r.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body lang="en_US" data-is-mode-edit="false" class="blog-details-page page basicpage blogDetailsTemplate locale_en_us region_NA "> <div id="panel-sharer-overlay" class="hide"></div>  <div class="d-done user-region" data-region-required="false"></div>    <div class="d-done detect-cookie" data-check-cookie="true" data-auth-required="false" data-auth-url="https://login.splunk.com/?module=roles&func=showloginform"></div> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-auth.cedce8739efe49cfda90b769eeb15c85.js"></script>   <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TPV7TP" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>   <div class="skipMainContent"> <a data-track-analytics="true" href="#splunk-main-content" class="skipMainContent__link splunk-btn sp-btn-borderless" tabindex="0"> </a> </div>  <div class="globalcomponent-enabler-header globalcomponent-enabler base-component parbase">  <div class="alternate-links"> <ul class="navbar-nav dropdown-menu cm-dropdown icon-flyout"> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/de_de" target="_self" id="Top_Nav-Language-Deutsch">Deutsch</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/fr_fr" target="_self" id="Top_Nav-Language-Francais">Francais</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ja_jp" target="_self" id="Top_Nav-Language-日本語">日本語</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ko_kr" target="_self" id="Top_Nav-Language-한국어">한국어</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_cn" target="_self" id="Top_Nav-Language-中文">中文</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_tw" target="_self" id="Top_Nav-Language-繁體中文">繁體中文</a> </li> </ul> </div> <div class="xfpage page basicpage"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="header base-component parbase aem-GridColumn aem-GridColumn--default--12">    <span id="freeSplunkSrc" data-src-freesplunk-1="//account.splunk.com/sign-up/js/xcomponent.min.js" data-src-freesplunk-2="//account.splunk.com/sign-up/js/splunk-xcomponent.js"></span>  <div id="iframe-modal" class="modal fade overlay-form-modal" role="dialog"> <div id="header-signup-xcomp" class="overlay-form overlay" style="margin-right:-450px;"></div> </div>  <div class="global-header-v2-wrapper global-header-V3 isNotSharedRequest"> <span style="display: none;">false</span> <input type="hidden" id="userSessionInfoServlet" data-url-value="/api/bin/user/info"/> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/global-nav/header/v2/header/clientlibs.06cfa144476a3f1a800d280c697122d5.css" type="text/css"> <div class="splunk-header-v2 splunk-header-v2-desktop notsharedglobalheader"> <nav class="navbar navbar-expand-lg splunk-navbar navbar-fixed-top"> <div class="container-fluid no-padding top-nav custom-masthead"> <div class="navbar-header"> <a data-track-analytics="true" class="navbar-brand topnav" href="https://www.splunk.com" target="_self"> <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/content/dam/splunk2/en_us/images/icon-library/footer/logo-splunk-corp-rgb-k-web.svg" alt="logo"/> <span class="sr-only">logo</span> </span> </a> </div> <ul class="navbar-nav navbar-right navbar-right-mobile">  <li class="nav-item-component mega-menu-nav navItem-right Support"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Support <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version1BS4"> <div class="subnav-container">     <div class="subnav__standalone splunk-color splunk2-background-white"> <div class="subnav__standalone-item"> <div class="subnav__standalone-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="LegacyVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="https://splunk.my.site.com/customer/s" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Portal </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Answers </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success/support-programs.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Programs </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact Us </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://advisory.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Security Updates </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://www.cisco.com/c/en/us/support/index.html" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cisco Support </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success/appdynamics-support.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AppDynamics Support </div> </div> </a> </div> </li> </ul> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div> </div> </div> </li> <li class="dropdown focus-enabled nav-item" id="topnav-100011"> <a href="#" data-track-analytics="true" class="dropdown-toggle cm-link topnav nav-link" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-Languages"> <span class="splunk-icon icon-expanded-languages-globe"> <span class="sr-only">Languages</span> </span> </a> <ul class="navbar-nav dropdown-menu cm-dropdown icon-flyout"> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/de_de" target="_self" id="Top_Nav-Language-Deutsch">Deutsch</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/fr_fr" target="_self" id="Top_Nav-Language-Francais">Francais</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ja_jp" target="_self" id="Top_Nav-Language-日本語">日本語</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ko_kr" target="_self" id="Top_Nav-Language-한국어">한국어</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_cn" target="_self" id="Top_Nav-Language-中文">中文</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_tw" target="_self" id="Top_Nav-Language-繁體中文">繁體中文</a> </li> </ul> </li> <li class="dropdown focus-enabled nav-item" id="topnav-100012"> <a href="#" data-track-analytics="true" class="dropdown-toggle cm-link topnav nav-link" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-"> <div class="splunk-user-avatar hidden"> <span class="loginUserNameIcon"></span> <span id="loggedinusername"></span> <span class="splunk-icon icon-chevron-down"></span> </div> <span class="splunk-icon icon-expanded-user-icon"> <span class="sr-only">Click User Account</span> </span> </a> <ul id="account" class="dropdown-menu cm-dropdown icon-flyout account focus-enabled has-product-links"> <li class="loggedout-user-link"> <a rel="nofollow" id="loginId" data-track-analytics="true" href="https://www.splunk.com/saml/login?module=nav" target="_self" class="topnav">Log In</a> </li> <li class="loggedout-user-link"> <a id="signId" data-track-analytics="true" href="https://www.splunk.com/en_us/sign-up.html" target="_self" class="topnav">Sign Up</a> </li> <li class="loggedin-user-link hidden"> <a rel="nofollow" id="mydashboard" data-track-analytics="true" href="https://www.splunk.com/en_us/my-dashboard.html" target="_self" class="topnav">My Dashboard</a> </li> <li class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://splunk.my.site.com/customer/s/list-views/cloud-stacks" target="_self" class="topnav" rel="noopener">Instances</a> </li> <li class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://education.splunk.com/Saba/Web_spf/NA10P2PRD105/app/dashboard" target="_blank" class="topnav" rel="noopener">My Training </a> </li> <li class="loggedin-user-link hidden"> <a rel="noopener" id="logout" data-track-analytics="true" target="_self" href="javascript:clearSessionStorage();deleteCookies('https://www.splunk.com/api/bin/sso/logout?module=sso_logout');" class="topnav">Logout</a> </li> <li class="product-links-container loggedin-user-link hidden"> <div class="product-links-header">PRODUCT LOGINS</div> <ul id="products" class="product-links"> <li class="product-link"> <a data-track-analytics="true" href="https://login.signalfx.com/" target="_self" class="topnav" rel="noopener">Splunk Observability Cloud</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://auth.scs.splunk.com/?amp&_gl=1*k6olpv*_ga_5EPM2P39FV*MTY4NDg3MjYzMS4xNzIuMS4xNjg0ODc0OTUzLjYwLjAuMA.." target="_self" class="topnav" rel="noopener">Splunk Cloud Services</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://login.appdynamics.com/sso/authenticate/" target="_blank" class="topnav" rel="noopener">Splunk AppDynamics</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://portal.victorops.com/membership/#/" target="_blank" class="topnav" rel="noopener">Splunk On-Call</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://monitoring.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Synthetic Monitoring</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://optimization.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Web Optimization</a> </li> </ul> </li> </ul> </li>  <li> </li> </ul> </div>  <div class="container-fluid no-padding"> <div class="navbar-header bottom-nav"> <a data-track-analytics="true" class="navbar-brand topnav" href="https://www.splunk.com" target="_self"> <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/content/dam/splunk2/en_us/images/icon-library/footer/logo-splunk-corp-rgb-k-web.svg" alt="logo"/> <span class="sr-only">logo</span> </span> </a> </div> <div class="show collapse navbar-collapse justify-content-between align-items-baseline" id=""> <ul class="nav navbar-nav navbar-left masthead">  <li class="nav-item-component mega-menu-nav navItem-left Products"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Products <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version2Desktop"> <div class="subnav-container">   <div class="subnav__left splunk-color splunk2-background-gray desktopTemplate"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/products.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/splunk-dashboard-examples.svg" alt="splunk-dashboard-examples" loading="lazy"/> </div> <div class="content-wrapper"> <a href="/en_us/products.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Product Overview</div> <div class="list-description">Get visibility and insights across your whole organization, powering actions that improve security, reliability and innovation velocity.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists hideSendBottomMobileListItem"> <div class="brow hide-sendToBottom__mobile">More from Splunk</div> <div class="feature-content secondary-header hide-sendToBottom__mobile"> </div> <div class="content-body headerTest hide-sendToBottom__mobile"> <ul class="list__items items__sendToBottom"> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/pricing.svg" alt="pricing" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/products/pricing.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Pricing </div> </div> </a> </div> </li> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/download.svg" alt="download" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/download.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Free Trials & Downloads </div> </div> </a> </div> </li> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/tour-icon.svg" alt="tour-icon" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/resources.html?filters=filterGroup5ProductTours" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Tours </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div>  </div>      <div class="subnav__right splunk-color splunk2-background-white"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/mitigating-security-risks.svg" alt="alt" loading="lazy"/> </div> <a href="/en_us/products/cyber-security.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Security </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/products/enterprise-security.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise Security </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/asset-and-risk-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Asset & Risk Intelligence </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/splunk-security-orchestration-and-automation.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk SOAR </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/attack-analyzer.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Attack Analyzer </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/user-behavior-analytics.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk User Behavior Analytics </div> </div> </a> </div> </li> </ul> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/observability.svg" alt="observability" loading="lazy"/> </div> <a href="/en_us/products/observability.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Observability </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/products/observability-cloud.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Observability Cloud </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/it-service-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk IT Service Intelligence </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/splunk-appdynamics.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk AppDynamics </div> </div> </a> </div> </li> </ul> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/delivery-platform.svg" alt="Platform" loading="lazy"/> </div> <a href="/en_us/products/platform.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Platform </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/products/splunk-cloud-platform.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Cloud Platform </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/splunk-enterprise.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/splunk-ai-assistant-for-spl.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk AI Assistant for SPL </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div>  <div class="subnav__bottomContainer"> <div class="subnav__bottomContainer-item"> <div class="subnav__bottomContainer-item-list"> <div class="splunk-button base-component parbase section">  <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/products.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false" data-urlmobile-behavior="_self"> <span class="custom-analytics-class customAnalytics-">View All Products</span> </a> </div> </div> <div class="subnav__bottomContainer-item-list"> </div> <div class="subnav__bottomContainer-item-list"> </div> </div> </div> </div>  </div> </div> </li>  <li class="nav-item-component mega-menu-nav navItem-left Solutions"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Solutions <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version2Desktop"> <div class="subnav-container">   <div class="subnav__left splunk-color splunk2-background-gray desktopTemplate"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/products/cyber-security.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="/en_us/products/cyber-security.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">SOC of the Future</div> <div class="list-description">Strengthen your cyber defense with integrations and an open ecosystem.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/products/observability.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="/en_us/products/observability.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Build a Leading Observability Practice</div> <div class="list-description">Maintain performance and reliability with unified visibility and lightning-fast troubleshooting.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/products/platform.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="/en_us/products/platform.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Build on a Solid Foundation</div> <div class="list-description">Power unified security, full-stack observability and custom apps on the same platform.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subnav__right splunk-color splunk2-background-white"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/mitigate-information-overload.svg" alt="mitigate-information-overload" loading="lazy"/> </div> <a href="/en_us/solutions/all-use-cases.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Use Cases </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/solutions/advanced-threat-detection.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Advanced Threat Detection </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/splunk-artificial-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Artificial Intelligence </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/automate-and-orchestrate-the-soc.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Automation & Orchestration </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/extend-visibility-to-the-cloud.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Extend Visibility to the Cloud </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/isolate-cloud-native-problems.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Isolate Cloud Native Problems </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/it-modernization.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> IT Modernization </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/apps-and-add-ons.svg" alt="apps-and-add-ons" loading="lazy"/> </div> <a href="/en_us/solutions/all-technologies.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Technologies </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/solutions/aws-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AWS </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/microsoft-azure-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Azure </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/gcp-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> GCP </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/kubernetes-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Kubernetes </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/opentelemetry.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> OpenTelemetry </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/sap.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SAP </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/manufacturing.svg" alt="manufacturing" loading="lazy"/> </div> <a href="/en_us/solutions/all-industries.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Industries </div> </div> </div> </a> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/solutions/industries/communications.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Communications & Media </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/industries/financial-services.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Financial Services </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/industries/manufacturing.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Manufacturing </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/industries/public-sector.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Public Sector </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/industries/retail.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Retail </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/industries/technology.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Technology </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div>  <div class="subnav__bottomContainer"> <div class="subnav__bottomContainer-item"> <div class="subnav__bottomContainer-item-list"> <div class="splunk-button base-component parbase section">  <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/solutions.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false"> <span class="custom-analytics-class customAnalytics-">View All Solutions</span> </a> </div> </div> <div class="subnav__bottomContainer-item-list"> </div> <div class="subnav__bottomContainer-item-list"> </div> </div> </div> </div>  </div> </div> </li>  <li class="nav-item-component mega-menu-nav navItem-left Why Splunk?"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Why Splunk? <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version2Desktop"> <div class="subnav-container">   <div class="subnav__left splunk-color splunk2-background-gray desktopTemplate"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/about-us/why-splunk.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/network-data.svg" alt="global" loading="lazy"/> </div> <div class="content-wrapper"> <a href="/en_us/about-us/why-splunk.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">What Makes Splunk Different </div> <div class="list-description">The world’s leading organizations trust Splunk to help keep their digital systems secure and reliable.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/about-us/how-splunk-compares.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="/en_us/about-us/how-splunk-compares.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">How Splunk Compares</div> <div class="list-description">Discover how Splunk’s Unified Security and Observability Platform improves your digital resilience.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subnav__right splunk-color splunk2-background-white"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Business Initiatives </div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/solutions/digital-resilience.html" target="_self" data-track-analytics="true" class="ga-cta digital-resilience list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Digital Resilience </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/digital-resilience-ai.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Artificial Intelligence </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/data-management.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Data Management </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/tool-consolidation.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Tool Consolidation </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/solutions/regulations-compliance.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Regulations and Compliance </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Better Together</div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/customers.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Stories </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/partners.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Partners </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/cisco-splunk-better-together.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cisco + Splunk </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/appdynamics-joins-splunk.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AppDynamics joins Splunk </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div>  </div>  </div> </div> </li>  <li class="nav-item-component mega-menu-nav navItem-left Resources"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Resources <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version2Desktop"> <div class="subnav-container">   <div class="subnav__left splunk-color splunk2-background-gray desktopTemplate"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/resources.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/analysis.svg" alt="analysis" loading="lazy"/> </div> <div class="content-wrapper"> <a href="/en_us/resources.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Resources</div> <div class="list-description">Explore e-books, white papers and more.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/about-us/events.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/predictive-maintenance.svg" alt="predictive-maintenance" loading="lazy"/> </div> <div class="content-wrapper"> <a href="/en_us/about-us/events.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Events</div> <div class="list-description">Join us at an event near you.</div> </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="https://www.splunk.com/en_us/blog" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/blog.svg" alt="blog" loading="lazy"/> </div> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/blog" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Blogs</div> <div class="list-description">See what Splunk is doing.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subnav__right splunk-color splunk2-background-white"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">GET STARTED</div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="https://lantern.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Lantern </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Success </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success/splunk-cloud-platform-migration.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Cloud Platform Migration </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/get-started.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Get Started With Splunk </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">become an expert</div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/training.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Training & Certification </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://docs.splunk.com/Documentation" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Documentation </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://usergroups.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> User Groups </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://community.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Community </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/surge.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SURGe </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Expand & optimize</div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/customer-success/support-programs.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Support </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://splunkbase.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunkbase </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://dev.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Dev </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Services </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div>  </div>  </div> </div> </li>  <li class="nav-item-component mega-menu-nav navItem-left Company"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Company <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version2Desktop"> <div class="subnav-container">   <div class="subnav__left splunk-color splunk2-background-gray desktopTemplate"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase">  <div class="featureListV2Desktop feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="/en_us/about-splunk.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="/en_us/about-splunk.html" class="header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">About Splunk </div> <div class="list-description">Our purpose is to build a safer and more resilient digital world. Every day, we live this purpose by helping security, IT and DevOps teams keep their organizations securely up and running. </div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subnav__right splunk-color splunk2-background-white"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Overview </div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/about-splunk.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> About Splunk </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://conf.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> .conf25 </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/perspectives.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Perspectives by Splunk </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/about-splunk/contact-us.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact us </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Work With us </div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/careers.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Careers </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/partners.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Become a Partner </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase">  <div class="v2DesktopVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Press</div> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="/en_us/newsroom.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Newsroom </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/about-splunk/awards.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Awards & Recognition </div> </div> </a> </div> </li> </ul> </div> </div> </div> </div> </div> </div>  </div>  </div> </div> </li> </ul> <ul class="nav navbar-nav navbar-right bottom-nav"> <li class="dropdown mega-menu-nav focus-enabled nav-item search-nav-item-bs4" id="topnav-100013"> <a data-track-analytics="true" class="dropdown-toggle search-icon topnav nav-link" aria-haspopup="true" aria-expanded="false"> <span class="splunk-icon icon-expanded-search-icon"> <span class="sr-only">Click Search</span> </span> <span class="search-help-text sr-only"></span> </a> <div class="dropdown-menu search-container"> <div class="input-group"> <form action="/en_us/search.html" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__"> <input class="form-control mm-input" placeholder="Search" type="text" value="" id="query" name="query" aria-label="Search"/> </form> </div> </div> </li>  <li class="nav-item-component mega-menu-nav navItem-right Support"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Support <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper version1BS4"> <div class="subnav-container">     <div class="subnav__standalone splunk-color splunk2-background-white"> <div class="subnav__standalone-item"> <div class="subnav__standalone-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="LegacyVersion feature-listitem leftIconPosition "> <div class="feature-content secondary-header "> </div> <div class="content-body headerTest "> <ul class="list__items "> <li> <div class="list-details"> <a href="https://splunk.my.site.com/customer/s" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Portal </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Answers </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success/support-programs.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Programs </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact Us </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://advisory.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Security Updates </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="https://www.cisco.com/c/en/us/support/index.html" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cisco Support </div> </div> </a> </div> </li> <li> <div class="list-details"> <a href="/en_us/customer-success/appdynamics-support.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AppDynamics Support </div> </div> </a> </div> </li> </ul> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div> </div> </div> </li> <li class="dropdown focus-enabled nav-item" id="topnav-100011"> <a href="#" data-track-analytics="true" class="dropdown-toggle cm-link topnav addCarotIcon nav-link" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-Languages"> <span class="splunk-icon icon-expanded-languages-globe"> <span class="sr-only">Languages</span> </span> </a> <ul class="navbar-nav dropdown-menu cm-dropdown icon-flyout"> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/de_de" target="_self" id="Top_Nav-Language-Deutsch">Deutsch</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/fr_fr" target="_self" id="Top_Nav-Language-Francais">Francais</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ja_jp" target="_self" id="Top_Nav-Language-日本語">日本語</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ko_kr" target="_self" id="Top_Nav-Language-한국어">한국어</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_cn" target="_self" id="Top_Nav-Language-中文">中文</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_tw" target="_self" id="Top_Nav-Language-繁體中文">繁體中文</a> </li> </ul> </li> <li class="dropdown focus-enabled nav-item" id="topnav-100012"> <a href="#" data-track-analytics="true" class="dropdown-toggle cm-link topnav addCarotIcon nav-link" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-"> <div class="splunk-user-avatar hidden"> <span class="loginUserNameIcon"></span> <span class="splunk-icon icon-chevron-down"></span> </div> <span class="splunk-icon icon-expanded-user-icon"> <span class="sr-only">Click User Account</span> </span> <span class="caret"></span> </a> <ul id="account" class="dropdown-menu cm-dropdown icon-flyout account focus-enabled has-product-links"> <li class="loggedout-user-link"> <a rel="nofollow" id="loginId" data-track-analytics="true" href="https://www.splunk.com/saml/login?module=nav" target="_self" class="topnav">Log In</a> </li> <li class="loggedout-user-link"> <a id="signId" data-track-analytics="true" href="https://www.splunk.com/en_us/sign-up.html" target="_self" class="topnav">Sign Up</a> </li> <li class="loggedin-user-link hidden"> <a rel="nofollow" id="mydashboard" data-track-analytics="true" href="https://www.splunk.com/en_us/my-dashboard.html" target="_self" class="topnav">My Dashboard</a> </li> <li class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://splunk.my.site.com/customer/s/list-views/cloud-stacks" target="_self" class="topnav" rel="noopener">Instances</a> </li> <li class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://education.splunk.com/Saba/Web_spf/NA10P2PRD105/app/dashboard" target="_blank" class="topnav" rel="noopener">My Training </a> </li> <li class="loggedin-user-link hidden"> <a rel="noopener" id="logout" data-track-analytics="true" target="_self" href="javascript:clearSessionStorage();deleteCookies('https://www.splunk.com/api/bin/sso/logout?module=sso_logout');" class="topnav">Logout</a> </li> <li class="product-links-container loggedin-user-link hidden"> <div class="product-links-header">PRODUCT LOGINS</div> <ul id="products" class="product-links"> <li class="product-link"> <a data-track-analytics="true" href="https://login.signalfx.com/" target="_self" class="topnav" rel="noopener">Splunk Observability Cloud</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://auth.scs.splunk.com/?amp&_gl=1*k6olpv*_ga_5EPM2P39FV*MTY4NDg3MjYzMS4xNzIuMS4xNjg0ODc0OTUzLjYwLjAuMA.." target="_self" class="topnav" rel="noopener">Splunk Cloud Services</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://login.appdynamics.com/sso/authenticate/" target="_blank" class="topnav" rel="noopener">Splunk AppDynamics</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://portal.victorops.com/membership/#/" target="_blank" class="topnav" rel="noopener">Splunk On-Call</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://monitoring.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Synthetic Monitoring</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://optimization.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Web Optimization</a> </li> </ul> </li> </ul> </li> <li id="topnav-100014"> <div class="free-splunk"> <a data-track-analytics="true" href="/en_us/download/splunk-cloud.html" id="free-splunk-click-desktop" data-toggle="modal" data-target="#iframe-modal" target="_self" class="noiframe btn hidden-xs express-lane-open topnav"> Free Splunk </a> </div>  </li> </ul> <ul class="nav navbar-nav navbar-right top-nav"> <li class="dropdown mega-menu-nav search-icon-conatiner focus-enabled" id="topnav-100013"> <a data-track-analytics="true" href="#" class="dropdown-toggle search-icon topnav" aria-haspopup="true" aria-expanded="false"> <span class="splunk-icon icon-expanded-search-icon"><span class="sr-only">Click Search</span></span> <span class="search-help-text sr-only"></span> </a> <div class="dropdown-menu search-container"> <div class="input-group"> <form action="/en_us/search.html" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__"> <input class="form-control mm-input" placeholder="Search" type="text" value="" id="query" name="query" aria-label="Search"/> </form> </div> </div> </li> <li id="topnav-100014"> <div class="free-splunk"> <a data-track-analytics="true" href="/en_us/download/splunk-cloud.html" id="free-splunk-click-desktop" data-target="#iframe-modal" target="_self" class="noiframe btn hidden-xs express-lane-open topnav"> Free Splunk </a> </div> </li> </ul> </div> </div> </nav> </div> <div class="splunk-header-v2-mobile "> <input type="checkbox" class="splunk-mainMenu-switch" id="splunk-mainMenu-switch"/> <input type="checkbox" class="splunk-search-switch" id="splunk-search-switch"/> <input type="radio" class="splunk-nav-switch-default" id="splunk-nav-switch-default" name="step-navigation" checked/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-0" id="splunk-nav-switch-0" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-1" id="splunk-nav-switch-1" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-2" id="splunk-nav-switch-2" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-3" id="splunk-nav-switch-3" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-4" id="splunk-nav-switch-4" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-99" id="splunk-nav-switch-99" name="step-navigation"/> <input type="radio" class="splunk-nav-switches splunk-nav-switch-100" id="splunk-nav-switch-100" name="step-navigation"/> <nav class="nav-wrapper"> <div class="header-main" id="splunk-globalNav-header"> <div class="header-main-logo-wrapper"> <a data-track-analytics="true" class="logo topnav" href="https://www.splunk.com" target="_self"> <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/content/dam/splunk2/en_us/images/icon-library/footer/logo-splunk-corp-rgb-k-web.svg" alt="logo"/> <span class="sr-only">logo</span> </span> </a> </div> <div class="header-main-freeSplunkButton-wrapper"> <a href="/en_us/download/splunk-cloud.html" data-track-analytics="true" id="free-splunk-click-mobile" data-toggle="modal" data-target="#iframe-modal" target="_self" class="splunk-btn multiline sp-btn-solid sp-btn-black ga-cta standalone noiframe free-splunk-mobile explress-lane-open express-lane-open topnav"> Free Splunk </a>  </div> <div class="header-main-hamburgerButton-wrapper"> <label for="splunk-mainMenu-switch" class="splunk-hamburger-label"> <div class="splunk-hamburger-button"></div> </label> </div> </div> <div class="header-body" id="splunk-globalNav-body"> <div class="menu-header"> <div class="top-links"> <div id="account-and-backNavigation" class="account-and-backNavigation"> <div class="navigation-backButton-wrapper">  <div class="navBackButton navBackButton-0"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Products</div> </label> </div>  <div class="navBackButton navBackButton-1"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Solutions</div> </label> </div>  <div class="navBackButton navBackButton-2"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Why Splunk?</div> </label> </div>  <div class="navBackButton navBackButton-3"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Resources</div> </label> </div>  <div class="navBackButton navBackButton-4"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Company</div> </label> </div>  <div class="navBackButton navBackButton-99"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Support</div> </label> </div> <div class="navBackButton navBackButton-100"> <label for="splunk-nav-switch-default"> <div class="navBackButton-element">Account</div> </label> </div> </div> <div id="mobile-account" class="account-items"> <label for="splunk-nav-switch-100" class="loggedInUserWrapper hidden" id="loggedInUserWrapper"> <div class="splunk-user-avatar"> <div class="loginUserNameIcon"></div> <div class="loggedinusername" id="loggedinusernamemobile"></div> </div> </label> <div class="loggedOutUserWrapper" id="loggedOutUserWrapper"> <span class="splunk-icon icon-expanded-user-icon"></span> <a id="loginId" class="second-test topnav loggedout-user-link" rel="nofollow" data-track-analytics="true" href="https://www.splunk.com/saml/login?module=nav" target="_self"> Log In </a> <div class="loginSeparator ">|</div> <a id="signId" data-track-analytics="true" class="third-test topnav loggedout-user-link" href="https://www.splunk.com/en_us/sign-up.html" target="_self"> Sign Up </a> </div> </div> </div> <div class="langLinks"> <div class="mobile-languageDD mblBottomNavLink" id="topnav-100011"> <a href="#" data-track-analytics="true" class="language-nav" id="Top_Nav-Languages" tabindex="0"> <span class="splunk-icon icon-expanded-languages-globe"> </span> </a> <ul class="mblNav-dropdown"> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/de_de" target="_self" id="Top_Nav-Language-Deutsch">Deutsch</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/fr_fr" target="_self" id="Top_Nav-Language-Francais">Francais</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ja_jp" target="_self" id="Top_Nav-Language-日本語">日本語</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/ko_kr" target="_self" id="Top_Nav-Language-한국어">한국어</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_cn" target="_self" id="Top_Nav-Language-中文">中文</a> </li> <li class="nav-item"> <a class="topnav nav-link" data-track-analytics="true" href="https://www.splunk.com/zh_tw" target="_self" id="Top_Nav-Language-繁體中文">繁體中文</a> </li> </ul> </div> </div> <div class="bottom-links search-section"> <div class="search-icon-container"> <label for="splunk-search-switch" class="splunk-search-open-button"> <div data-track-analytics="true" class="search-icon mobile-search-container"> <span class="splunk-icon icon-expanded-search-icon" aria-label="Search"></span> </div> </label> </div> <div class="splunk-search-wrapper"> <div class="splunk-search-close-button-wrapper"> <label for="splunk-search-switch" class="splunk-search-close-button-label"> <div class="splunk-search-close-button"></div> </label> </div> <div class="splunk-search-form-wrapper" id="splunk-search-form-wrapper"> <form action="/en_us/search.html" autocomplete="off" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__" class="splunk-search-form"> <input class="form-control mm-input splunk-search-form-input" placeholder="Search" type="text" value="" id="query" name="query" aria-label="Search"/> </form> </div> </div> </div> </div> </div> <div class="menu-body"> <div class="step-menu-container"> <div class="step-menu-container-firstLevel">  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-0"> <div class="navPrimaryLevel-element">Products</div> </label> </div>  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-1"> <div class="navPrimaryLevel-element">Solutions</div> </label> </div>  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-2"> <div class="navPrimaryLevel-element">Why Splunk?</div> </label> </div>  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-3"> <div class="navPrimaryLevel-element">Resources</div> </label> </div>  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-4"> <div class="navPrimaryLevel-element">Company</div> </label> </div>  <div class="navPrimaryLevel"> <label for="splunk-nav-switch-99"> <div class="navPrimaryLevel-element">Support</div> </label> </div> </div> <div class="step-menu-container-secondLevel">  <div class="navSecondaryLevel navSecondaryLevel-0 sectionName-products">   <div class="featuredSection splunk-color splunk2-background-gray"> <div class="featuredSection-item"> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/products.html" data-ctatarget="_self"> <div class="featureContentMobile-icon list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/splunk-dashboard-examples.svg" alt="splunk-dashboard-examples" loading="eager"/> </div> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/products.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Product Overview</div> <div class="featureContentMobile-linkDescription list-description">Get visibility and insights across your whole organization, powering actions that improve security, reliability and innovation velocity.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists hideSendBottomMobileListItem"> <div class="brow hide-sendToBottom__mobile">More from Splunk</div> <div class="mobileChosen feature-content secondary-header hide-sendToBottom__mobile"> </div> <div class="content-body headerTest hide-sendToBottom__mobile"> <div class="list__items items__sendToBottom"> <div class="list-element"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/pricing.svg" alt="pricing" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/products/pricing.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Pricing </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/download.svg" alt="download" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/download.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Free Trials & Downloads </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/content/dam/splunk2/en_us/images/icon-library/navigation/tour-icon.svg" alt="tour-icon" loading="lazy"/> </div> <div class="list-details"> <a href="/en_us/resources.html?filters=filterGroup5ProductTours" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Tours </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subNavSection splunk-color splunk2-background-white"> <div class="subNavSection-item"> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/mitigating-security-risks.svg" alt="alt" loading="lazy"/> </div> <a href="/en_us/products/cyber-security.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Security </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/enterprise-security.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise Security </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/asset-and-risk-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Asset & Risk Intelligence </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/splunk-security-orchestration-and-automation.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk SOAR </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/attack-analyzer.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Attack Analyzer </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/user-behavior-analytics.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk User Behavior Analytics </div> </div> </a> </div> </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/observability.svg" alt="observability" loading="lazy"/> </div> <a href="/en_us/products/observability.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Observability </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/observability-cloud.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Observability Cloud </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/it-service-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk IT Service Intelligence </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/splunk-appdynamics.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk AppDynamics </div> </div> </a> </div> </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/delivery-platform.svg" alt="Platform" loading="lazy"/> </div> <a href="/en_us/products/platform.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Platform </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/splunk-cloud-platform.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Cloud Platform </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/splunk-enterprise.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/splunk-ai-assistant-for-spl.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk AI Assistant for SPL </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div>  <div class="bottomContainerSection"> <div class="bottomContainerSection-item"> <div class="bottomContainerSection-item-list"> <div class="splunk-button base-component parbase section">  <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/products.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false" data-urlmobile-behavior="_self"> <span class="custom-analytics-class customAnalytics-">View All Products</span> </a> </div> </div> <div class="bottomContainerSection-item-list"> </div> <div class="bottomContainerSection-item-list"> </div> </div> </div> </div>  </div>  <div class="navSecondaryLevel navSecondaryLevel-1 sectionName-solutions">   <div class="featuredSection splunk-color splunk2-background-gray"> <div class="featuredSection-item"> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/products/cyber-security.html" data-ctatarget="_self"> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/products/cyber-security.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">SOC of the Future</div> <div class="featureContentMobile-linkDescription list-description">Strengthen your cyber defense with integrations and an open ecosystem.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/products/observability.html" data-ctatarget="_self"> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/products/observability.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Build a Leading Observability Practice</div> <div class="featureContentMobile-linkDescription list-description">Maintain performance and reliability with unified visibility and lightning-fast troubleshooting.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/products/platform.html" data-ctatarget="_self"> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/products/platform.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Build on a Solid Foundation</div> <div class="featureContentMobile-linkDescription list-description">Power unified security, full-stack observability and custom apps on the same platform.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subNavSection splunk-color splunk2-background-white"> <div class="subNavSection-item"> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/mitigate-information-overload.svg" alt="mitigate-information-overload" loading="lazy"/> </div> <a href="/en_us/solutions/all-use-cases.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Use Cases </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/advanced-threat-detection.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Advanced Threat Detection </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/splunk-artificial-intelligence.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Artificial Intelligence </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/automate-and-orchestrate-the-soc.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Automation & Orchestration </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/extend-visibility-to-the-cloud.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Extend Visibility to the Cloud </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/isolate-cloud-native-problems.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Isolate Cloud Native Problems </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/it-modernization.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> IT Modernization </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/apps-and-add-ons.svg" alt="apps-and-add-ons" loading="lazy"/> </div> <a href="/en_us/solutions/all-technologies.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Technologies </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/aws-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AWS </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/microsoft-azure-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Azure </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/gcp-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> GCP </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/kubernetes-monitoring.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Kubernetes </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/opentelemetry.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> OpenTelemetry </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/sap.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SAP </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon " src="/content/dam/splunk2/en_us/images/icon-library/color-black/manufacturing.svg" alt="manufacturing" loading="lazy"/> </div> <a href="/en_us/solutions/all-industries.html" target="_self" data-track-analytics="true" class="ga-cta feature-content-hotspot"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <div class="splunk-btn sp-btn-borderless sp-btn-darkGray feature-content-hotspot-cta"> Industries </div> </div> </div> </a> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/communications.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Communications & Media </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/financial-services.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Financial Services </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/manufacturing.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Manufacturing </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/public-sector.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Public Sector </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/retail.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Retail </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/industries/technology.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Technology </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div>  <div class="bottomContainerSection"> <div class="bottomContainerSection-item"> <div class="bottomContainerSection-item-list"> <div class="splunk-button base-component parbase section">  <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/solutions.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false"> <span class="custom-analytics-class customAnalytics-">View All Solutions</span> </a> </div> </div> <div class="bottomContainerSection-item-list"> </div> <div class="bottomContainerSection-item-list"> </div> </div> </div> </div>  </div>  <div class="navSecondaryLevel navSecondaryLevel-2 sectionName-whysplunk">   <div class="featuredSection splunk-color splunk2-background-gray"> <div class="featuredSection-item"> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/about-us/why-splunk.html" data-ctatarget="_self"> <div class="featureContentMobile-icon list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/network-data.svg" alt="global" loading="eager"/> </div> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/about-us/why-splunk.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">What Makes Splunk Different </div> <div class="featureContentMobile-linkDescription list-description">The world’s leading organizations trust Splunk to help keep their digital systems secure and reliable.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/about-us/how-splunk-compares.html" data-ctatarget="_self"> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/about-us/how-splunk-compares.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">How Splunk Compares</div> <div class="featureContentMobile-linkDescription list-description">Discover how Splunk’s Unified Security and Observability Platform improves your digital resilience.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subNavSection splunk-color splunk2-background-white"> <div class="subNavSection-item"> <div class="subNavSection-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Business Initiatives </div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/digital-resilience.html" target="_self" data-track-analytics="true" class="ga-cta digital-resilience list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Digital Resilience </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/digital-resilience-ai.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Artificial Intelligence </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/data-management.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Data Management </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/tool-consolidation.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Tool Consolidation </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/solutions/regulations-compliance.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Regulations and Compliance </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Better Together</div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/customers.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Stories </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/partners.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Partners </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/cisco-splunk-better-together.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cisco + Splunk </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/appdynamics-joins-splunk.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AppDynamics joins Splunk </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>  </div>  </div>  <div class="navSecondaryLevel navSecondaryLevel-3 sectionName-resources">   <div class="featuredSection splunk-color splunk2-background-gray"> <div class="featuredSection-item"> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/resources.html" data-ctatarget="_self"> <div class="featureContentMobile-icon list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/analysis.svg" alt="analysis" loading="eager"/> </div> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/resources.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Resources</div> <div class="featureContentMobile-linkDescription list-description">Explore e-books, white papers and more.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/about-us/events.html" data-ctatarget="_self"> <div class="featureContentMobile-icon list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/predictive-maintenance.svg" alt="predictive-maintenance" loading="eager"/> </div> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/about-us/events.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Events</div> <div class="featureContentMobile-linkDescription list-description">Join us at an event near you.</div> </a> </div> </div> </div> </div> </div> </div> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="https://www.splunk.com/en_us/blog" data-ctatarget="_self"> <div class="featureContentMobile-icon list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" src="/content/dam/splunk2/en_us/images/icon-library/color-black/blog.svg" alt="blog" loading="eager"/> </div> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="https://www.splunk.com/en_us/blog" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">Blogs</div> <div class="featureContentMobile-linkDescription list-description">See what Splunk is doing.</div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subNavSection splunk-color splunk2-background-white"> <div class="subNavSection-item"> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">GET STARTED</div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="https://lantern.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Lantern </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Success </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success/splunk-cloud-platform-migration.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Cloud Platform Migration </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/get-started.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Get Started With Splunk </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">become an expert</div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/training.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Training & Certification </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://docs.splunk.com/Documentation" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Documentation </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://usergroups.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> User Groups </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://community.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Community </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/surge.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SURGe </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Expand & optimize</div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success/support-programs.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Support </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://splunkbase.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunkbase </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://dev.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Dev </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Services </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div>  </div>  </div>  <div class="navSecondaryLevel navSecondaryLevel-4 sectionName-company">   <div class="featuredSection splunk-color splunk2-background-gray"> <div class="featuredSection-item"> <div class="featuredSection-list"> <div class="featuredSection-listWrapper "><div class="list-item base-component parbase">  <div class="featureListV2Mobile feature-listitem primaryLayout iconAlignTop"> <div class="featureContentMobile feature-content" data-ctalink="/en_us/about-splunk.html" data-ctatarget="_self"> <div class="featureContentMobile-linkWrapper content-wrapper"> <a href="/en_us/about-splunk.html" class="featureContentMobile-link header ga-cta featured-content-hotspot" data-track-analytics="true"> <div class="featureContentMobile-linkHeader feature-content-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray">About Splunk </div> <div class="featureContentMobile-linkDescription list-description">Our purpose is to build a safer and more resilient digital world. Every day, we live this purpose by helping security, IT and DevOps teams keep their organizations securely up and running. </div> </a> </div> </div> </div> </div> </div> </div> </div>  </div>      <div class="subNavSection splunk-color splunk2-background-white"> <div class="subNavSection-item"> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Overview </div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/about-splunk.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> About Splunk </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://conf.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> .conf25 </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/perspectives.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Perspectives by Splunk </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/about-splunk/contact-us.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact us </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Work With us </div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/careers.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Careers </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/partners.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Become a Partner </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="subNavSection-item-list"> <div><div class="list-item base-component parbase">  <div class="v2MobileVersion feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Press</div> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="/en_us/newsroom.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Newsroom </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/about-splunk/awards.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Awards & Recognition </div> </div> </a> </div> </div> </div> </div> </div> </div> </div> </div> </div>  </div>  </div>  <div class="navSecondaryLevel navSecondaryLevel-99 sectionName-support">     <div class="subnav__standalone splunk-color splunk2-background-white"> <div class="subnav__standalone-item"> <div class="subnav__standalone-item-list"> <div><div class="list-item base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="v2MobileVersion feature-listitem leftIconPosition "> <div class="mobileChosen feature-content secondary-header "> </div> <div class="content-body headerTest "> <div class="list__items "> <div class="list-element"> <div class="list-details"> <a href="https://splunk.my.site.com/customer/s" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Portal </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Answers </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success/support-programs.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Support Programs </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact Us </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://advisory.splunk.com/" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Security Updates </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="https://www.cisco.com/c/en/us/support/index.html" target="_blank" data-track-analytics="true" class="ga-cta list-detail-hotspot" rel="noopener"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cisco Support </div> </div> </a> </div> </div> <div class="list-element"> <div class="list-details"> <a href="/en_us/customer-success/appdynamics-support.html" target="_self" data-track-analytics="true" class="ga-cta list-detail-hotspot"> <div class="list-header splunk2-h5 sub_h5">  <div class="list-detail-hotspot-cta splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AppDynamics Support </div> </div> </a> </div> </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div> </div> <div class="navSecondaryLevel navSecondaryLevel-100 sectionName-account"> <div class="loggedout-user-link"> <a rel="nofollow" id="loginId" data-track-analytics="true" href="https://www.splunk.com/saml/login?module=nav" target="_self" class="topnav">Log In</a> </div> <div class="loggedout-user-link"> <a id="signId" data-track-analytics="true" href="https://www.splunk.com/en_us/sign-up.html" target="_self" class="topnav">Sign Up</a> </div> <div class="loggedin-user-link hidden"> <a rel="nofollow" id="mydashboard" data-track-analytics="true" href="https://www.splunk.com/en_us/my-dashboard.html" target="_self" class="topnav">My Dashboard</a> </div> <div class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://splunk.my.site.com/customer/s/list-views/cloud-stacks" target="_self" class="topnav" rel="noopener">Instances</a> </div> <div class="loggedin-user-link hidden"> <a id="authenticated" data-track-analytics="true" href="https://education.splunk.com/Saba/Web_spf/NA10P2PRD105/app/dashboard" target="_blank" class="topnav" rel="noopener">My Training </a> </div> <div class="loggedin-user-link hidden"> <a rel="noopener" id="logout" data-track-analytics="true" target="_self" href="javascript:clearSessionStorage();deleteCookies('https://www.splunk.com/api/bin/sso/logout?module=sso_logout');" class="topnav">Logout</a> </div> <div class="product-links-container loggedin-user-link hidden"> <div class="product-links-header">PRODUCT LOGINS</div> <ul id="products" class="product-links"> <li class="product-link"> <a data-track-analytics="true" href="https://login.signalfx.com/" target="_self" class="topnav" rel="noopener">Splunk Observability Cloud</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://auth.scs.splunk.com/?amp&_gl=1*k6olpv*_ga_5EPM2P39FV*MTY4NDg3MjYzMS4xNzIuMS4xNjg0ODc0OTUzLjYwLjAuMA.." target="_self" class="topnav" rel="noopener">Splunk Cloud Services</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://login.appdynamics.com/sso/authenticate/" target="_blank" class="topnav" rel="noopener">Splunk AppDynamics</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://portal.victorops.com/membership/#/" target="_blank" class="topnav" rel="noopener">Splunk On-Call</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://monitoring.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Synthetic Monitoring</a> </li> <li class="product-link"> <a data-track-analytics="true" href="https://optimization.rigor.com/" target="_blank" class="topnav" rel="noopener">Splunk Web Optimization</a> </li> </ul> </div> </div> </div> </div> </div> </div> </nav> </div> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/global-nav/header/v2/header/clientlibs.2dfeabf262cb77c989b8c3573a4ad8c1.js"></script> </div> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true"> </section> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true">  <script> (function ($) { if($('.pushdown-banner').length>0){ console.debug('setting up the patch...'); // first we try to get the path url var setBannerBackgroundClickAnalytics = () => { console.debug('running patch...'); let homepageAnalitycsLocaleCode; if (window.location.pathname === "/" || window.location.pathname.includes('/en_us')) { homepageAnalitycsLocaleCode = 'en_us'; } else if (window.location.pathname.includes('/ja_jp')) { homepageAnalitycsLocaleCode = 'ja_jp'; } else if (window.location.pathname.includes('/de_de')) { homepageAnalitycsLocaleCode = 'de_de'; } else if (window.location.pathname.includes('/fr_fr')) { homepageAnalitycsLocaleCode = 'fr_fr'; } else if (window.location.pathname.includes('/ko_kr')) { homepageAnalitycsLocaleCode = 'ko_kr'; } else if (window.location.pathname.includes('/zh_cn')) { homepageAnalitycsLocaleCode = 'zh_cn'; } else if (window.location.pathname.includes('/zh_tw')) { homepageAnalitycsLocaleCode = 'zh_tw'; } const otherLocaleHomepage = (window.location.pathname === "/ja_jp" || window.location.pathname === "/de_de" || window.location.pathname === "/fr_fr" || window.location.pathname === "/ko_kr" || window.location.pathname === "/zh_cn" || window.location.pathname === "/zh_tw"); const isHomepage = (window.location.pathname === "/" || window.location.pathname.includes('homepage') || otherLocaleHomepage); var isPatched = false; const targetNode = document.querySelector("body"); const config = { attributes: false, childList: true, subtree: true }; const pushDownBannerMutationCallback = (mutationList, pushDownBannerObserver) => { for (const mutation of mutationList) { if (mutation.type === "childList") { console.debug('more mutations'); if (mutation.target.classList.contains('pushdown-banner') && !isPatched) { console.debug('found the pushdownBanner'); //do something here pushDownBannerObserver.disconnect(); isPatched = true; continueWithThePatching(); } } } }; const sanitizeAnalyticsHref = (ctaHref = '') => { // we need to check if this is an absolute or relative link var urlPattern = /^https?:\/\//i; let finalURL = null; if (urlPattern.test(ctaHref)) { finalURL = new URL(ctaHref); } else { finalURL = new URL(`https://${window.location.hostname}/${ctaHref}`); } let linkPathName = finalURL.pathname; if (linkPathName.includes('//')) { linkPathName = linkPathName.replace('//', '/'); } return `${finalURL.hostname}${linkPathName}`; }; const setAnalyticEvents = (elementContainer = '') => { if (elementContainer === null || elementContainer === '' || elementContainer.length === 0) return new Error(`The element passed to the analitycs processor is empty...`); const anchorList = elementContainer.querySelectorAll('a'); anchorList.forEach(anchor => { anchor.setAttribute('data-track-analytics', 'false'); anchor.classList.add('no-analytics'); //anchor.addEventListener('click', ctaAnalyticsProcess); }); }; var pushDownBannerObserver = new MutationObserver(pushDownBannerMutationCallback); pushDownBannerObserver.observe(targetNode, config); var continueWithThePatching = () => { let pushDownBannerElementHeight = 0; let headerElementHeight = 0; const pushDownBannerElement = document.querySelector('#pushdown-banner'); if (pushDownBannerElement !== null) { pushDownBannerElementHeight = pushDownBannerElement.getBoundingClientRect().height; setAnalyticEvents(pushDownBannerElement); } const headerElement = document.querySelector('.splunk-header-v2 nav.splunk-navbar'); if (headerElement !== null) { headerElementHeight = headerElement.getBoundingClientRect().height; } if (pushDownBannerElement !== null && headerElement !== null) { const totalHeight = pushDownBannerElementHeight + headerElementHeight; let bannerSpecialStyle; // Adding some pushdown banner height patch const specialCSS = ` @media (max-width: 767px) { html.hasBanner #splunk-main-content { animation-name: showBannerMobileConfClose !important; } html.hasBanner.showBanner #splunk-main-content { animation-name: showBannerMobileConf !important; } @keyframes showBannerMobileConf { 0% { margin-top: 0px; } 100% { margin-top: ${totalHeight}px; } } @keyframes showBannerMobileConfClose { 0% { margin-top: ${totalHeight}px; } 100% { margin-top: 0px; } } } `; if (bannerSpecialStyle === undefined){ let updatedCSSNode = document.createElement('style'); updatedCSSNode.setAttribute('id', "bannerSpecialStyles"); updatedCSSNode.textContent = specialCSS; document.head.appendChild(updatedCSSNode); bannerSpecialStyle = document.querySelector('#bannerSpecialStyles'); } else { bannerSpecialStyle.textContent = specialCSS; } } // Analytics patch const getTheBaseURLfromTheButton = (buttonElement = null) => { if (buttonElement === null) return new Error(`Push Down banner's button was not found...`); //first we get the href from the element const originalLink = buttonElement.getAttribute(`href`); //Now we assign it into the returning variable let processedURL = originalLink.trim(); //Now we proceed to remove the base of the url 'http://' or 'https://' processedURL = processedURL.replace('https://', ''); processedURL = processedURL.replace('http://', ''); // Now we proceed to check if the last character is a forward slash if (processedURL.endsWith('/')) { processedURL = processedURL.slice(0, -1); } return processedURL; }; const processAnalyticsComponentName = (ctaText = '') => { return ctaText.replaceAll(" ", "-").toLowerCase(); }; if (pushDownBannerElement !== null) { console.debug('push down banner found, patching click...'); // now we try to get the info from the button assigned const psbButtonElementSpan = pushDownBannerElement.querySelector(".pushDownBanner-ctaButton .splunk-btn span"); const psbButtonElementURL = pushDownBannerElement.querySelector(".pushDownBanner-ctaButton .splunk-btn").getAttribute('href'); const psbButtonElementText = pushDownBannerElement.querySelector(".pushDownBanner-ctaButton .splunk-btn").innerText; const analyticsComponentName = processAnalyticsComponentName(psbButtonElementText); console.log('isHomepage',isHomepage); if (isHomepage) { $('#pushdown-banner .pushDownBanner-backgroundImageSection').on('click', function () { console.debug('click homepage'); window.dataLayer.push({ event: "linkClick_hp", eventInfo: { category: "All clicks on CTA Button", eventLabel: `${psbButtonElementSpan.innerHTML}`, clickUrl: `${window.location.hostname}/${homepageAnalitycsLocaleCode}`, component: `pushDownBanner_${analyticsComponentName}_splunk-button`, componentName: "splunk-button", container: "PushDownBanner", destinationUrl: sanitizeAnalyticsHref(psbButtonElementURL), modernization: !0, }, }); //GA4 DataLayer Push window.dataLayer.push({ event: 'link_click_hp', link_text: `${psbButtonElementSpan.innerHTML}`, link_domain: `${window.location.hostname}`, link_url: sanitizeAnalyticsHref(psbButtonElementURL), link_position: 'PushDownBanner', }); }); $('#pushdown-banner .pushDownBanner-container').on('click', function (event) { console.debug('click homepage'); window.dataLayer.push({ event: "linkClick_hp", eventInfo: { category: "All clicks on CTA Button", eventLabel: `${psbButtonElementSpan.innerHTML}`, clickUrl: `${window.location.hostname}/${homepageAnalitycsLocaleCode}`, component: `pushDownBanner_${analyticsComponentName}_splunk-button`, componentName: "splunk-button", container: "PushDownBanner", destinationUrl: sanitizeAnalyticsHref(psbButtonElementURL), modernization: !0, }, }); //GA4 DataLayer Push window.dataLayer.push({ event: 'link_click_hp', link_text: `${psbButtonElementSpan.innerHTML}`, link_domain: `${window.location.hostname}`, link_url: sanitizeAnalyticsHref(psbButtonElementURL), link_position: 'PushDownBanner', }); }); } else { $('#pushdown-banner .pushDownBanner-backgroundImageSection').on('click', function () { console.debug('click non homepage'); window.dataLayer.push({ event: "linkClick", eventInfo: { category: "All clicks on CTA Button", eventLabel: `${psbButtonElementSpan.innerHTML}`, clickUrl: `${window.location.hostname}/${homepageAnalitycsLocaleCode}`, component: `pushDownBanner_${analyticsComponentName}_splunk-button`, componentName: "splunk-button", container: "PushDownBanner", destinationUrl: sanitizeAnalyticsHref(psbButtonElementURL), modernization: !0, }, }); //GA4 DataLayer Push window.dataLayer.push({ event: 'link_click', link_text: `${psbButtonElementSpan.innerHTML}`, link_domain: `${window.location.hostname}`, link_url: sanitizeAnalyticsHref(psbButtonElementURL), link_position: 'PushDownBanner', }); }); $('#pushdown-banner .pushDownBanner-container').on('click', function () { console.debug('click non homepage'); window.dataLayer.push({ event: "linkClick", eventInfo: { category: "All clicks on CTA Button", eventLabel: `${psbButtonElementSpan.innerHTML}`, clickUrl: `${window.location.hostname}/${homepageAnalitycsLocaleCode}`, component: `pushDownBanner_${analyticsComponentName}_splunk-button`, componentName: "splunk-button", container: "PushDownBanner", destinationUrl: sanitizeAnalyticsHref(psbButtonElementURL), modernization: !0, }, }); //GA4 DataLayer Push window.dataLayer.push({ event: 'link_click', link_text: `${psbButtonElementSpan.innerHTML}`, link_domain: `${window.location.hostname}`, link_url: sanitizeAnalyticsHref(psbButtonElementURL), link_position: 'PushDownBanner', }); }); } console.debug('page patched'); } }; }; document.addEventListener('load', setBannerBackgroundClickAnalytics()); } })(jQuery); </script> <style> /* temporal patch for globalNav V2 with banner */ html.hasBanner.showBanner .splunk-header-v2-mobile .navSecondaryLevel { padding-bottom: 150px; } </style> </section> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true"> </section> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true"> </section> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true"> </section> </div> <div class="federated-search base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="lucid-search" data-environment="prod" data-searchbarredirecturl="https://www.splunk.com/en_us/search.html" data-applicationname="SplunkCom" data-language="en"> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/search/federated-search/v1/federated-search/clientlib-search-bar.ed76780b977947c58d03ca5257b34daf.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/search/federated-search/v1/federated-search/clientlib-search-bar.d388d5cd4c1a8074916144f0c72b08b2.js"></script> <script type="text/javascript"> const source = '/etc.clientlibs/splunk/core/clientlibs/clientlib-searchBarReactLib.min.js?v='+Math.floor(Math.random() * 1000); window.Splunk_app_searchBar = window.Splunk_app_searchBar || {}; window.Splunk_app_searchBar.searchBarJsSource = source; window.Splunk_app_searchBar.renderSplunkSearchBarComponent = renderSplunkSearchBarComponent; </script> </div> </div> </div> </div> </div></div> </div> <div class="root responsivegrid container"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="sub-nav experience-fragment experiencefragment aem-GridColumn aem-GridColumn--default--12"> <div id="experience-fragment-4174194d80" class="cmp-experiencefragment cmp-experiencefragment--sub-nav-blogs"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="sub-nav base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="sub-navigation"> <div class="sub-nav-container splunk2-background-white"> <hr/> <div class="row"> <div class="col-xs-12 col-sm-12 col-md-12 col-lg-12 sub-nav-col"> <span class="primary-link-container" data-track-analytics="true" data-track-analytics-mobile="true"> <div class="primary-link desktop-title "> <a href="/en_us/blog" data-track-analytics="true" data-track-analytics-mobile="true">Splunk Blogs</a> </div> <div class="primary-link primary-mobile-title"> <a>Splunk Blogs</a> <span class="splunk-icon icon-chevron-up rotate-icon"></span> </div> </span> <span class="mobile-scroll"> <div class="mobile-title "> <a href="/en_us/blog" data-track-analytics="true" data-track-analytics-mobile="true"> Splunk Blogs </a> </div> <span class="secondary-links-container"> <div class="secondary-links"> <ul> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/security.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Security</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/observability.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Observability</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/artificial-intelligence.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Artificial Intelligence</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/platform.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Platform</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/leadership.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Leadership</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/partners.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Partners</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/conf-splunklive.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">.conf</a> </li> <li class=" list-items "> <a class="list-item-link" href="/en_us/blog/splunklife.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Splunk Life</a> </li> <li class="dropdown list-items"> <span class="dropdown-toggle--mobile-title">More</span> <a class="dropdown-toggle caret accessibilityDropdown" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0"> More <span class="splunk-icon icon-chevron-down"></span> </a> <div class="dropdown-menu"> <ul> <li> <a class="child-list-item" href="/en_us/blog/customers.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Customers</a> </li> <li> <a class="child-list-item" href="/en_us/blog/industries.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Industries</a> </li> <li> <a class="child-list-item" href="/en_us/blog/splunk-for-good.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Global Impact</a> </li> <li> <a class="child-list-item" href="/en_us/blog/learn.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Learn</a> </li> <li> <a class="child-list-item" href="/en_us/blog/tips-and-tricks.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Tips & Tricks</a> </li> <li> <a class="child-list-item" href="/en_us/form/splunk-blogs-subscribe.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Subscribe to Splunk Blogs</a> </li> <li> <a class="child-list-item" href="/en_us/blog/author.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Blog Authors</a> </li> <li> <a class="child-list-item" href="/en_us/blog/site-map.html" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0">Blogs Sitemap</a> </li> </ul> </div> </li> <li class="dropdown more-list-item"> <a class="dropdown-toggle caret" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false" data-track-analytics="true" data-track-analytics-mobile="true" tabindex="0"> More <span class="splunk-icon icon-chevron-down"></span> </a> <div class="dropdown-menu"> <ul class="more-dropdown-list"></ul> </div> </li> </ul> </div> </span> </span> </div> </div> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/sub-nav/v1/sub-nav/clientlibs.415912eef7d03c4f381ff67665caaada.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-bootstrap-popper.6cf34d4f6eeb46b7e0db34730c14f6e7.js"></script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-bootstrap-dropdown.3a2d3a5124a2f9f44b965e25c97ccf63.js"></script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/sub-nav/v1/sub-nav/clientlibs.c125b8798298deb90ef3a53feb40aec7.js"></script> </div> </div> </div> </div> </div></div> </div> <div class="blog_details blog-detail-page base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="splunkBlogsArticle-Wrapper splunk-fullBleed-width"> <div class="splunkBlogsArticle-header-Wrapper">  <div class="splunkBlogsArticle-header-breadcrumbs splunk-grid-container">  <div class="splunkBlogsArticle-header-tagCategory"> <a href="/en_us/blog/platform.html" class="splunkBlogsArticle-tagElement" data-track-analytics="true">Platform</a> </div> <div class="splunkBlogsArticle-header-date">July 16, 2024</div> |  <div class="splunkBlogsArticle-header-readTime">2 Minute Read</div> </div> <div class="splunkBlogsArticle-header-hero splunk-grid-container"> <h1 class="splunkBlogsArticle-header-hero-headingContainer">  Monitoring Bucket Health in Splunk Enterprise </h1> <div class="splunkBlogsArticle-header-hero-imageContainer">  <img src="/content/dam/splunk-blogs/images/en_us/2024/06/monitoring-bucket-health-hero.jpg" loading="lazy"/> </div> </div> </div> <div class="splunkBlogsArticle-body-Wrapper splunk-grid-container">  <div class="splunkBlogsArticle-body-header">  <div class="splunkBlogsArticle-body-headerAuthorSection ">By <a href="/en_us/blog/author/mpalarchio.html">Matteo Palarchio</a> </div> <div class="splunkBlogsArticle-body-headerSocialIconsSection"> <div> <div id="experience-fragment-7086eb2750" class="cmp-experiencefragment cmp-experiencefragment--social-share"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="socialband base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="social-band-wrapper splunk2-background splunk-white ">  <div class="social-band horizantal align-left enable-social-share"> <ul class="social-band__icons "> <li class="icon"> <a data-track-analytics="true" target="_blank" data-platform="twitter" title="Share on X" class="twitter button-wrap"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Share on X</span> </a> </li> <li class="icon"> <a data-track-analytics="true" target="_blank" data-platform="facebook" title="Share on Facebook" class="facebook button-wrap"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Share on Facebook</span> </a> </li> <li class="icon"> <a data-track-analytics="true" target="_blank" data-platform="linkedin" title="Share on LinkedIn" class="linkedin button-wrap"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Share on LinkedIn</span> </a> </li> </ul> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/socialband/v1/socialband/clientlibs.16a508aef5b3c85e8531569300cab9ab.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/socialband/v1/socialband/clientlibs.5648c3f45110de9ceaebbbd4192fb9b2.js"></script> </div> </div> </div> </div> </div></div> </div> </div> </div> <div class="splunkBlogsArticle-body-content">   <div> <div class="text base-component parbase">  <div class="cmp-text rte-container"> <p><b>Why is understanding small buckets important? </b>Bucket health is important to monitor because it can adversely impact Splunk search performance. Unhealthy bucket growth — especially the asymmetric creation of small vs. large sized buckets — can lead to slower or paused searches by requiring each search to read more (TSIDX) files and perform more disk I/O. This leads to slower or paused searches, and at its worst can cause search and indexing services to become unavailable to users. With limited resources left available, indexing queues can become blocked or full, resulting in data latency that impacts alerting and other time critical searches.</p><h3>How Do Buckets Work?</h3><p><a href="https://www.splunk.com/en_us/products/splunk-enterprise.html" target="_blank">Splunk Enterprise</a> stores indexed data in buckets, which are directories containing both the data and index files into the data. An index typically consists of many buckets, organized by age of the data. To learn more about buckets, read the Splunk Docs <a href="https://docs.splunk.com/Documentation/Splunk/8.2.0/Indexer/Bucketsandclusters" target="_blank" rel="noopener">here</a>. New bucket creation is a normal part of Splunk internal operations — as the volume of indexed data grows, so do buckets. New buckets can also be created from routine system tasks such as indexer cluster restarts, instance shutdowns and last recently used cache eviction. </p><p>Small buckets, or buckets that were rolled prematurely before reaching their maximum configured size, directly impact search performance. The more buckets a search needs to read, the more resources a search requires to complete. Thus, a telltale sign of unhealthy bucket growth is the presence of small-sized buckets.</p><h3>What Causes Unhealthy Buckets?</h3><p>In most cases, the presence of very small buckets are indicative of data issues, particularly timestamp mismatches. When the events coming into an index are outside of a allowed time span for a bucket, Splunk Enterprise will create a new bucket. For example, the following situations can lead to buckets rolling prematurely: </p><ul><li>Sourcetypes mixing different data sources from the past, and were generated in different timeframes</li><li>Systems that have incorrect time settings on the source, or applications logging incorrect timestamps</li><li>Timestamp formats (strftime) in events that aren't defined properly, or are autodetected incorrectly by Splunk Enterprise.</li></ul><p style="padding-top: 25.0px;">When timestamps vary, buckets capture fewer events before they end up getting rolled. This is because Splunk limits the number of hot buckets that are open at any time point in time and timestamp mismatches cause more hot buckets to be created and rolled. </p><h3>What Can I Do To Address the Root Cause(s)?</h3><ul><li>Keep an eye on Health Report bucket monitoring </li><li>Look for and address timestamp mismatch issues</li><li>Evaluate the use of automation tools which trigger system events such as indexer cluster restarts and shutdowns</li><li>Merge an index’s small buckets into larger ones using the bucket-merge command. See Splunk Docs <a href="https://docs.splunk.com/Documentation/Splunk/8.2.0/Troubleshooting/CommandlinetoolsforusewithSupport#merge-buckets" target="_blank" rel="noopener">here</a>.</li></ul><p style="padding-top: 25.0px;">The key questions to ask to determine if small buckets are impacting your deployment are:</p><ul><li>How many unhealthy (small) buckets exist in my deployment? How much does it contribute to my overall deployment? On a per-index basis?</li><li>Which indexes are the top contributors to small buckets?</li><li>What is the correlation between system events and small bucket creation?</li></ul><p style="padding-top: 25.0px;">Here are some searches you can run to better understand the distribution and presence of small buckets in your deployment:</p><p>On each Cluster Manager, just to understand whether bucketing is behaving evenly on IDXers (recommended time range: 7 days):</p><pre>| rest splunk_server=local /services/cluster/master/peers | rename <br />label AS peer_name | stats sum(bucket_count) AS bucket_count by <br />peer_name | sort - bucket_count</pre><p>On each Search Head, to understand whether buckets being rolled are too small (recommended time range: 1 day & 7 days):</p><pre>index=_internal source=*/splunkd.log* hotbucketroller | stats count by<br />caller | sort - count</pre><p>If these exploratory searches determine the presence of too many small buckets in your deployment, you should investigate your data ingestion rules to prevent the problem from happening again in the future. As always, reach out to the Splunk community on <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" rel="noopener">Splunk Answers</a> and join an upcoming <a href="https://usergroups.splunk.com/" target="_blank" rel="noopener">user group</a> to ask any additional questions about running a high-performing Splunk Enterprise deployment.</p> </div> </div> </div> </div> <div class="splunkBlogsArticle-body-sidebar">  <div class="splunkBlogsArticle-body-sidebarExploreMoreSection"> </div> <div class="splunkBlogsArticle-body-sidebarFloatingCardSection"> <div> <div class="experience-fragment experiencefragment"> <div id="experience-fragment-9d14197e9b" class="cmp-experiencefragment cmp-experiencefragment--floating-promo-card"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="sticky-side-nav base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="Sticky-Side-Nav" data-use-sticky-script="false"> <div class="main-content removeGuttersCustomContent"> <div class="text-image base-component parbase">  <div class="splunk-tni-wrapper"> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/text-image/v1/text-image/clientlibs.ad74bf04bf19d9b07501d2913991d33c.css" type="text/css"> <div class="tni tni--image-top unwrap-text"> <div class="tni__image splunk-image splunk-image-fullwidth " style="min-width: splunk-image-fullwidth;max-width: splunk-image-fullwidth;"> <a data-track-analytics="true" class="img-link ga-cta " href="/en_us/form/digital-resilience-pays-off.html" target="_self"> <picture class="splunk-picture-wrapper "> <source srcset="/content/dam/splunk2/en_us/images/campaigns/resilience-pays-off/digital-resilience-pays-off-cover.png" media="(max-width: 767px)"/> <img data-src="/content/dam/splunk2/en_us/images/campaigns/resilience-pays-off/digital-resilience-pays-off-cover.png" class=" lazyload splunk-image splunk-image-fullwidth " alt="digital resilience pays off"/> <figcaption></figcaption> </picture> </a> </div>  <div class="tni__desc rte-container ">  <span class=" tabContent"> <p><span class="splunk2-h6">Digital Resilience Pays Off</span></p> <p>How resilient is your organization? Learn how to mature your digital resilience with this free guide.</p> </span>  </div> </div> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/text-image/v1/text-image/clientlibs.5bbb49f8bfdac93640b1157a054b4de0.js"></script> </div> </div> <div class="flex-container base-component parbase">  <a id="promo-button" class="page-anchor"></a> <div class="desktop-spacer-top-margin-md desktop-spacer-bottom-margin-md mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="splunk-flex-container splunk2-background none border-color-splunk-gray-light " style=" --defaultAnimation:- s; --mobileanimation:- s; margin-top:px; margin-bottom:px;"> <div style="min-height: 0px" class="d-flex flex-wrap flex-row align-items-stretch align-content-stretch justify-content-start align-items-md-center align-content-md-center justify-content-md-center "> <div class="flex-item flex-fill px-desktop-0 order-1 "> <div class="splunk-button base-component parbase">  <a class="splunk-btn multiline spacing-bottom on sp-btn-hollow sp-btn-pink none ga-cta custom-analytics-class customAnalytics- btn-full-width " href="/en_us/form/digital-resilience-pays-off.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false" data-urlmobile-behavior="_self"> <span class="custom-analytics-class customAnalytics-">Download now</span> </a> </div> </div> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/flex-container/v1/flex-container/clientlibs.feae5435dea5fdfa5e632f36c72725c3.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/flex-container/v1/flex-container/clientlibs.be71c5d1ddd5f97085ba9b932d46b587.js"></script> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/sticky-side-nav/v1/sticky-side-nav/clientlibs.1b2acf201f5b29af232fbaced0f26d8f.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/sticky-side-nav/v1/sticky-side-nav/clientlibs.b7734cbeb7235ad8262a26d8481d869f.js"></script> </div> </div> </div> </div> </div></div> </div> </div> </div> </div> <div class="splunkBlogsArticle-body-author">  <div class="splunkBlogsAuthorBadge"> <div class="splunkBlogsAuthorBadge-image"> <img class="splunkBlogsAuthorBadge-image-src" src="/content/dam/splunk-blogs/images/author-profile-pics/mpalarchio-headshot.jpg" alt="Matteo Palarchio Picture" loading="lazy"/> </div> <div class="splunkBlogsAuthorBadge-authorName"><a href="/en_us/blog/author/mpalarchio.html">Matteo Palarchio</a></div> <div class="splunkBlogsAuthorBadge-authorDescription"><p>Matteo Palarchio (he/him) is the product manager for storage and data lifecycle, focused on DDAA, DDSS, EMEK and Smartstore. Before storage, he worked on growth and adoption for dashboards.</p> </div> <div class="splunkBlogsAuthorBadge-socialIcons"> </div> </div> </div> </div> </div> </div> <div class="latestblog base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="desktop-spacer-top-margin-md desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/clientlibs/clientlib-SlickCarousel.8683b29a639392289f12d554b6e3dbaf.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/latest-blogs/v1/latest-blogs/clientlibs.acc4e61a45956af9a276c135005d72ac.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-SlickCarousel.d1c19290a81be8714e406d343489e840.js"></script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/latest-blogs/v1/latest-blogs/clientlibs.78e41c1f25036c72cd46252c5c61b38c.js"></script> <div class="latest-blogs-wrapper no-analytics">  <h2 class="splunk2-h2 section-title">Related Articles</h2>   <div class="latest-blogs-container latest-blogs-container_related" data-total-result-size="256" data-results-per-page="9">  <div class="item">  <div class="media"> <a href="https://www.splunk.com/en_us/blog/platform/introducing-inputs-data-manager-on-splunk-cloud.html" title="Introducing Inputs Data Manager on Splunk Cloud" class="lazyload" data-background-image="/content/dam/splunk-blogs/images/en_us/2020/11/idm-screenshot-vel.jpg"></a> </div>  <div class="card"> <div class="tags">  <a href="https://www.splunk.com/en_us/blog/platform.html" class="category-tag-link">Platform</a>   <span class="read-time-duration">4 Min Read</span>  </div> <a class="headline" href="https://www.splunk.com/en_us/blog/platform/introducing-inputs-data-manager-on-splunk-cloud.html" target="_self" tabindex="0"> <h3 class="splunk2-h4">Introducing Inputs Data Manager on Splunk Cloud</h3> </a> <div class="splunk-body shorter-height"> We're giving you an overview of introducing inputs data manager on Splunk Cloud and answering frequently asked questions. </div> </div> </div>  <div class="item">  <div class="media"> <a href="https://www.splunk.com/en_us/blog/platform/deep-learning-toolkit-3-1-release-for-kubernetes-and-openshift.html" title="Deep Learning Toolkit 3.1 - Release for Kubernetes and OpenShift" class="lazyload" data-background-image="/content/dam/splunk-blogs/images/en_uk/05/dltk-part1-hero.jpg"></a> </div>  <div class="card"> <div class="tags">  <a href="https://www.splunk.com/en_us/blog/platform.html" class="category-tag-link">Platform</a>   <span class="read-time-duration">2 Min Read</span>  </div> <a class="headline" href="https://www.splunk.com/en_us/blog/platform/deep-learning-toolkit-3-1-release-for-kubernetes-and-openshift.html" target="_self" tabindex="0"> <h3 class="splunk2-h4">Deep Learning Toolkit 3.1 - Release for Kubernetes and OpenShift</h3> </a> <div class="splunk-body shorter-height"> With the launch of Splunk’s Machine Learning Toolkit 5.2, we have also released a new Deep Learning Toolkit for Splunk (DLTK) along with a brand new “golden” container image. Read all about it here. </div> </div> </div>  <div class="item">  <div class="media"> <a href="https://www.splunk.com/en_us/blog/platform/making-machine-learning-accessible-to-more-users.html" title="Making Machine Learning Accessible to More Users" class="lazyload" data-background-image="/content/dam/splunk-blogs/images/2020/04/MLTK_MachineLearning_Blog_Hero.jpg"></a> </div>  <div class="card"> <div class="tags">  <a href="https://www.splunk.com/en_us/blog/platform.html" class="category-tag-link">Platform</a>   <span class="read-time-duration">1 Min Read</span>  </div> <a class="headline" href="https://www.splunk.com/en_us/blog/platform/making-machine-learning-accessible-to-more-users.html" target="_self" tabindex="0"> <h3 class="splunk2-h4">Making Machine Learning Accessible to More Users</h3> </a> <div class="splunk-body shorter-height"> Splunk's Machine Learning Toolkit allows data scientists to quickly experiment, develop models, and operationalize algorithms on data. </div> </div> </div>  </div>   </div>  <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> <div class="about-splunk experience-fragment experiencefragment aem-GridColumn aem-GridColumn--default--12"> <div id="experience-fragment-299c437d52" class="cmp-experiencefragment cmp-experiencefragment--about-splunk"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="flex-container base-component parbase aem-GridColumn aem-GridColumn--default--12">  <a id="about-splunk" class="page-anchor"></a> <div class="desktop-spacer-top-margin-lg desktop-spacer-bottom-margin-lg mobile-spacer-top-margin-lg mobile-spacer-bottom-margin-lg splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="splunk-flex-container splunk2-background splunk-gray-lightest full-WidthContainer " style=" --defaultAnimation:- s; --mobileanimation:- s; margin-top:px; margin-bottom:px;"> <div style="min-height: 0px" class="d-flex flex-wrap flex-row row-gap-md-0 container align-items-stretch align-content-stretch justify-content-start align-items-md-stretch align-content-md-stretch justify-content-md-start "> <div class="flex-item flex-fill w-100 order-1 col-md-12 order-md-1"> <div class="text-image base-component parbase">  <div class="desktop-spacer-top-margin-md desktop-spacer-bottom-margin-none mobile-spacer-top-margin-lg mobile-spacer-bottom-margin-none default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="splunk-tni-wrapper"> <div class="tni unwrap-text">  <div class="tni__desc rte-container ">  <span class=" tabContent"> <h2><span class="splunk2-h2">About Splunk</span></h2> </span>  </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> <div class="flex-item flex-fill w-100 order-3 col-md-6 order-md-2"> <div class="text-image base-component parbase">  <div class="splunk-tni-wrapper"> <div class="tni unwrap-text">  <div class="tni__desc rte-container ">  <span class=" tabContent"> <p><span class="splunk-body">The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.</span></p><p><span class="splunk-body">Founded in 2003, Splunk is a global company  — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.</span></p> </span>  </div> </div> </div> </div> </div> <div class="flex-item flex-fill w-100 order-2 col-md-6 order-md-3"> <div class="video base-component parbase">  <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/video/v1/video/clientlibs.d41d8cd98f00b204e9800998ecf8427e.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/clientlibs/clientlib-videoClientlib.7234e2d029fa45bec79b2e42965ad1eb.css" type="text/css"> <div class="splunk-video-wrapper video-frame sixteen-by-nine center-center">     <div class="media video parbase vidyard-custom-video"> <div class="video-frame vidyard__customModal open-yardvideo-modal contentCenter ga-cta " data-toggle="modal" data-target="#yardvideo-modal-kgbBy2YCvJYjkt3ABwiW3e" data-contentid="kgbBy2YCvJYjkt3ABwiW3e" data-autoplay="1" data-memo-button="true" data-optimized="false"> <div class="vidyard__customModal__wrapper noTitle noDescription" data-autoplay="1"> <div data-track-analytics="true" class="video-frame overview-video vidyard__customModal__wrapper__thumbnail"> <img class="video-thumbnail desktop " src="https://play.vidyard.com/kgbBy2YCvJYjkt3ABwiW3e.jpg" loading="lazy"/> <img class="video-thumbnail mobile " src="https://play.vidyard.com/kgbBy2YCvJYjkt3ABwiW3e.jpg" loading="lazy"/> </div>  </div> <div class="vidyard__customModal__content noTitle noDescription"> <a data-track-analytics="true" data-toggle="modal" class="vidyard__customModal__wrapper__playIcon iconCenter iconLight"> <img class="playicon-light" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iODAiIGhlaWdodD0iODAiIHZpZXdCb3g9IjAgMCA4MCA4MCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPGcgb3BhY2l0eT0iMC44Ij4KPGNpcmNsZSBjeD0iNDAiIGN5PSI0MCIgcj0iNDAiIGZpbGw9IndoaXRlIi8+CjxwYXRoIG9wYWNpdHk9IjAuOSIgZD0iTTMxLjgwNjYgNTcuODMxNlYyMi4xNjg5TDU4Ljc5NDYgNDAuMjUxNEwzMS44MDY2IDU3LjgzMTZaIiBmaWxsPSIjRUQwMDgwIi8+CjwvZz4KPC9zdmc+Cg==" alt="play Light"/> </a> </div> </div> </div> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/video/v1/video/clientlibs.d1b5843f864fb228a700cd4ff3a81098.js"></script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-underscore.f1baf32b673e8e579ae2bcadfa1b7206.js"></script> <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-loadVideoclientlibDynamically.5e4ec16df472fcfe0fd9dffb45bb96aa.js"></script>       </div> </div> </div> <div class="flex-item flex-fill order-4 order-md-4"> <div class="splunk-button base-component parbase">  <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-md mobile-spacer-top-margin-none mobile-spacer-bottom-margin-md splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <a class="splunk-btn multiline sp-btn-borderless sp-btn-pink none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/about-us/why-splunk.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false" data-urlmobile-behavior="_self"> <span class="custom-analytics-class customAnalytics-">Learn more about Splunk</span> </a> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div></div> </div> <div class="subscribe experience-fragment experiencefragment aem-GridColumn aem-GridColumn--default--12"> <div id="experience-fragment-ce2a0eb99e" class="cmp-experiencefragment cmp-experiencefragment--subscribe-footer"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="flex-container base-component parbase aem-GridColumn aem-GridColumn--default--12">  <a id="Anchor2" class="page-anchor"></a> <div class="desktop-spacer-top-margin-lg desktop-spacer-bottom-margin-lg mobile-spacer-top-margin-lg mobile-spacer-bottom-margin-lg splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="splunk-flex-container splunk2-background splunk-white border-color-splunk-gray-light " style=" --defaultAnimation:- s; --mobileanimation:- s; margin-top:px; margin-bottom:px;"> <div style="min-height: 0px" class="d-flex flex-wrap flex-row row-gap-md-0 align-items-stretch align-content-stretch justify-content-start align-items-md-stretch align-content-md-stretch justify-content-md-start "> <div class="flex-item flex-fill px-mobile-0 px-desktop-0 w-100 order-1 col-md-5 order-md-1"> <div class="container responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="text-image base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="splunk-tni-wrapper"> <div class="tni unwrap-text">  <div class="tni__desc rte-container ">  <span class=" tabContent"> <h2><span class="splunk2-h2">Subscribe to our blog</span></h2> <p>Get the latest articles from Splunk straight to your inbox.</p> </span>  </div> </div> </div> </div> <div class="splunk-button base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="desktop-spacer-top-margin-sm desktop-spacer-bottom-margin-none mobile-spacer-top-margin-sm mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <a class="splunk-btn multiline sp-btn-solid sp-btn-pink none ga-cta custom-analytics-class customAnalytics- standalone style " href="/en_us/form/splunk-blogs-subscribe.html" data-track-analytics="true" target="_blank" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false" data-urlmobile-behavior="_self"> <span class="custom-analytics-class customAnalytics-">Sign Up Now</span> </a> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div>             </div> </div> <div class="flex-item flex-fill px-mobile-0 px-desktop-0 w-100 order-2 col-md-7 order-md-2"> <div class="flex-container base-component parbase">  <a id="research" class="page-anchor"></a> <div class="splunk-flex-container splunk2-background none border-color-splunk-gray-light " style=" --defaultAnimation:- s; --mobileanimation:- s; margin-top:px; margin-bottom:px;"> <div style="min-height: 0px" class="d-flex flex-wrap flex-row align-items-stretch align-content-stretch justify-content-start align-items-md-stretch align-content-md-stretch justify-content-md-start "> <div class="flex-item flex-fill order-1 order-md-1"> <div class="box-item base-component parbase">  <div class="desktop-spacer-top-margin-sm desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="box-item-componentwrapper "> <div class="box-item " data-target="_blank" custom-analytics-class="splunk-twitter "> <div class="box d-block d-flex splunk-image-smallicon "> <div class="box__image"> <img src="/content/dam/splunk2/en_us/images/icon-library/footer/v2_b/twitter-social-icon-dark-hover.svg" loading="lazy" class="splunk-image splunk-image-smallicon desktop" alt="x logo"/> <img src="/content/dam/splunk2/en_us/images/icon-library/footer/v2_b/twitter-social-icon-dark-hover.svg" loading="lazy" class="lazyload mobile splunk-image splunk-image-smallicon" alt="x logo"/> </div> <div class="box__content"> <h3 class="splunk2-h5">Connect with Splunk on X</h3> <a class="splunk-btn multiline box__cta ga-cta splunk-twitter sp-btn-borderless sp-btn-pink" data-track-analytics="true" href="https://twitter.com/splunk" target="_blank" custom-analytics-class="splunk-twitter " rel="noopener"> <span>Follow @Splunk</span> </a> </div> </div> </div> </div> <div class="splunk-superModal vidyard-modal modal fade-scale in" tabindex="-1" role="dialog" id="box-modal"> <div class="modal-dialog modal-fullscreen modal-dialog-scrollable" role="document"> <div class="modal-content"> <div class="modal-header"> <button type="button" data-track-analytics="true" class="close" data-dismiss="modal" aria-label="Close"> <span aria-hidden="true" class="modal-close">x</span> </button> </div> <div class="modal-body"> Model content data </div> </div> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/box-item/v1/box-item/clientlibs.d6b9aa786c0a0184c2d29c48f78c70f5.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/box-item/v1/box-item/clientlibs.0debd8f42d9b422497796f81122de3eb.js"></script> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> <div class="flex-item flex-fill order-1 order-md-1"> <div class="box-item base-component parbase">  <div class="desktop-spacer-top-margin-sm desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="box-item-componentwrapper "> <div class="box-item " data-target="_blank" custom-analytics-class="splunk-instagram "> <div class="box d-block d-flex splunk-image-smallicon "> <div class="box__image"> <img src="/content/dam/splunk2/en_us/images/icon-library/footer/instagram-social-icon-dark.svg" loading="lazy" class="splunk-image splunk-image-smallicon desktop" alt="instagram"/> <img src="/content/dam/splunk2/en_us/images/icon-library/footer/instagram-social-icon-dark.svg" loading="lazy" class="lazyload mobile splunk-image splunk-image-smallicon" alt="instagram"/> </div> <div class="box__content"> <h3 class="splunk2-h5">Connect with Splunk on Instagram</h3> <a class="splunk-btn multiline box__cta ga-cta splunk-instagram sp-btn-borderless sp-btn-pink" data-track-analytics="true" href="https://www.instagram.com/splunk/" target="_blank" custom-analytics-class="splunk-instagram " rel="noopener"> <span>Follow @Splunk</span> </a> </div> </div> </div> </div> <div class="splunk-superModal vidyard-modal modal fade-scale in" tabindex="-1" role="dialog" id="box-modal"> <div class="modal-dialog modal-fullscreen modal-dialog-scrollable" role="document"> <div class="modal-content"> <div class="modal-header"> <button type="button" data-track-analytics="true" class="close" data-dismiss="modal" aria-label="Close"> <span aria-hidden="true" class="modal-close">x</span> </button> </div> <div class="modal-body"> Model content data </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div> </div> </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> </div> </div> </div> </div></div> </div> </div></div> </div> </div> <div class="globalcomponent-enabler-footer globalcomponent-enabler base-component parbase">  <div class="xfpage page basicpage"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="footer base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="global-footer-wrapper"> <div class="global-footer-v2_b global-footer-v2"> <div class="container global-footer-v2-container">  <div data-layout="column-count-4"> <div> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn--default--none aem-GridColumn aem-GridColumn--default--12 aem-GridColumn--offset--default--0">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">COMPANY<span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> COMPANY</div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-splunk.html" target="_self"> About Splunk </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/careers.html" target="_self"> Careers </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-us/how-splunk-compares.html" target="_self"> How Splunk Compares </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-splunk/leadership.html" target="_self"> Leadership </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/newsroom.html" target="_self"> Newsroom </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/partners.html" target="_self"> Partners </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/perspectives.html" target="_self"> Perspectives by Splunk </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/legal/splunk-policy-positions.html" target="_self"> Splunk Policy Positions </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-splunk/splunk-data-security-and-privacy.html" target="_self"> Splunk Protects </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-splunk/splunk-ventures-funding.html" target="_self"> Splunk Ventures </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/procurement/suppliers.html" target="_self"> Supplier Central </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-us/why-splunk.html" target="_self"> Why Splunk? </a> </li> </ul> </div> </div> </div> </div> <div> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">PRODUCTS <span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> PRODUCTS </div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/download.html" target="_self"> Free Trials & Downloads </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/products/pricing.html" target="_self"> Pricing </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/products.html" target="_self"> View All Products </a> </li> </ul> </div> </div> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">SPLUNK SITES<span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> SPLUNK SITES</div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://conf.splunk.com/" target="_self" rel="noopener"> .conf </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://docs.splunk.com/Documentation" target="_blank" rel="noopener"> Documentation </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/about-splunk/investors.html" target="_self"> Investor Relations </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/training.html" target="_self"> Training & Certification </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.mypromomall.com/splunk" target="_blank" rel="noopener"> T-Shirt Store </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/resources.html?filters=filterGroup5Videos,filterGroup5Demos" target="_self"> Videos </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="/en_us/resources.html" target="_self"> View All Resources </a> </li> </ul> </div> </div> </div> </div> <div> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">LEARN<span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> LEARN</div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/siem-security-information-event-management.html" target="_blank"> What Is SIEM? </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/splunk-universal-forwarder.html" target="_blank"> Splunk Universal Forwarder </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/opentelemetry.html" target="_blank"> OpenTelemetry: An Introduction </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/security-operations-metrics.html" target="_blank"> Metrics For The SOC </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/observability.html" target="_blank"> What Is Observability? </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/it-monitoring.html" target="_blank"> IT & Systems Monitoring: An Overview </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/reliability-metrics.html" target="_blank"> Reliability Metrics </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/language-models-slm-vs-llm.html" target="_blank"> LLMs vs SLMs: What’s The Difference? </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn/it-tech-spending.html" target="_blank"> IT & Tech Spending For 2025 </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.splunk.com/en_us/blog/learn.html" target="_blank"> View All Articles </a> </li> </ul> </div> </div> </div> </div> <div> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn--default--none aem-GridColumn aem-GridColumn--default--12 aem-GridColumn--offset--default--0">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">CONTACT SPLUNK<span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> CONTACT SPLUNK</div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <div class="splunk-cta-button"> <a href="/en_us/about-splunk/contact-us.html" target="_self" data-track-analytics="true" class="splunk-btn ga-cta sp-btn-borderless sp-btn-darkGray"> Contact Sales </a> </div> </li> <li class="subheader"> <div class="splunk-cta-button"> <a href="/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="splunk-btn ga-cta sp-btn-borderless sp-btn-darkGray"> Contact Support </a> </div> </li> </ul> </div> </div> <div class="list-item base-component parbase aem-GridColumn--default--none aem-GridColumn aem-GridColumn--default--12 aem-GridColumn--offset--default--0">  <div class="footer-listitem"> <div class="header-accordion" data-track-analytics="true">USER REVIEWS<span class="splunk-icon icon-chevron-down"></span></div> <div class="header"> USER REVIEWS</div> <ul class="list-elements" aria-expanded="false"> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.gartner.com/reviews/market/security-information-event-management/vendor/splunk" target="_blank" rel="noopener"> Gartner Peer Insights™ </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.peerspot.com/search?item_type=Product&search=Splunk" target="_blank" rel="noopener"> PeerSpot </a> </li> <li class="subheader"> <a class="list-CTA addCursor ga-cta " data-track-analytics="true" href="https://www.trustradius.com/vendors/splunk" target="_blank" rel="noopener"> TrustRadius </a> </li> </ul> </div> </div> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="text-image base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="splunk-tni-wrapper"> <div class="tni ">  <div class="tni__desc rte-container ">  <span class=" tabContent"> <div class="footer-listitem" style="margin-bottom: 0px !important;"><div class="header">SPLUNK MOBILE</div> </div> </span>  </div> </div> </div> </div> <div class="text-image base-component parbase aem-GridColumn aem-GridColumn--default--12">  <a id="applPlayDownloadApp" class="page-anchor"></a> <div class="splunk-tni-wrapper"> <div class="tni tni--image-bottom unwrap-text"> <div class="tni__image splunk-image splunk-image-fullwidth " style="min-width: splunk-image-fullwidth;max-width: splunk-image-fullwidth;"> <a data-track-analytics="true" class="img-link ga-cta " href="http://splk.it/ios" target="_blank" rel="noopener"> <picture class="splunk-picture-wrapper "> <source srcset="/content/dam/splunk2/en_us/images/logos/download-app-store-apple.svg" media="(max-width: 767px)"/> <img data-src="/content/dam/splunk2/en_us/images/logos/download-app-store-apple.svg" class=" lazyload splunk-image splunk-image-fullwidth " alt="Download Splunk Mobile on the apple app store"/> <figcaption></figcaption> </picture> </a> </div>  </div> </div> </div> <div class="text-image base-component parbase aem-GridColumn aem-GridColumn--default--12">  <a id="googlePlayDownloadApp" class="page-anchor"></a> <div class="desktop-spacer-top-margin-sm desktop-spacer-bottom-margin-none mobile-spacer-top-margin-sm mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer" style=" --data--authored-margintop-desktop: ; --data--authored-margintop-mobile: ; --data--authored-marginbottom-desktop: ; --data--authored-marginbottom-mobile: ; --data--authored-marginleft-desktop: ; --data--authored-marginleft-mobile: ; --data--authored-marginright-desktop: ; --data--authored-marginright-mobile: ; "> <div class="splunk-tni-wrapper"> <div class="tni tni--image-left unwrap-text"> <div class="tni__image splunk-image splunk-image-fullwidth " style="min-width: splunk-image-fullwidth;max-width: splunk-image-fullwidth;"> <a data-track-analytics="true" class="img-link ga-cta " href="http://splk.it/android" target="_blank" rel="noopener"> <picture class="splunk-picture-wrapper center-center"> <source srcset="/content/dam/splunk2/en_us/images/logos/google-play-badge-sml.png" media="(max-width: 767px)"/> <img data-src="/content/dam/splunk2/en_us/images/logos/google-play-badge-lrg.png" class=" lazyload splunk-image splunk-image-fullwidth " alt=" Download Splunk Mobile on the Google Play store"/> <figcaption></figcaption> </picture> </a> </div>  </div> </div> <style> # + .default { margin-top: var(--data--authored-margintop-desktop); margin-bottom: var(--data--authored-marginbottom-desktop); margin-left: var(--data--authored-marginleft-desktop); margin-right: var(--data--authored-marginright-desktop); } @media (max-width: 767px) { # + .default { margin-top: var(--data--authored-margintop-mobile); margin-bottom: var(--data--authored-marginbottom-mobile); margin-left: var(--data--authored-marginleft-mobile); margin-right: var(--data--authored-marginright-mobile); } } </style> </div> </div> <div class="plain-html base-component parbase aem-GridColumn aem-GridColumn--default--12">  <section class="rte-container" data-track-analytics="true"> <style> @media (max-width: 767px) { /* Mobile version of the images */ .global-footer-wrapper .global-footer-v2 #applPlayDownloadApp + div img.splunk-image.d-lg-none.d-xl-none, .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div img.splunk-image.d-lg-none.d-xl-none { width: 40%; } /* Desktop version of the images */ .global-footer-wrapper .global-footer-v2 #applPlayDownloadApp + div img.splunk-image.d-none.d-xs-none.d-sm-none.d-md-none, .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div img.splunk-image.d-none.d-xs-none.d-sm-none.d-md-none { display: none; } .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div.desktop-spacer-top-margin-sm, .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div.desktop-spacer-top-margin-sm { margin-top: 15px; } } @media (min-width: 768px) { /* Mobile version of the images */ .global-footer-wrapper .global-footer-v2 #applPlayDownloadApp + div img.splunk-image.d-lg-none.d-xl-none, .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div img.splunk-image.d-lg-none.d-xl-none { display: none; } .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div.desktop-spacer-top-margin-sm, .global-footer-wrapper .global-footer-v2 #googlePlayDownloadApp + div.desktop-spacer-top-margin-sm { margin-top: 20px; } } .site-map-content { justify-content: end !important; margin: 0 !important; } </style> <script> document.addEventListener("DOMContentLoaded", function(){ if ($('.customer-quote__carousel').length>0) { $('.customer-quote__carousel').each(function(){ $(this).find('img').each(function(){ //let that = this; $(this).attr('src', $(this).data('src')) }); }); } }); </script> </section> </div> </div> </div> </div> </div> </div> </div> </div>  <div class="content-separator top"></div> <div class="footer-bottom" data-footer-layout="column-count-4"> <div class="splunk-footer-logo"> <a data-track-analytics="true" class="logo topnav bottomnav-mar19" href="https://www.splunk.com/" target="_self"> <img class="logo-wrapper" loading="lazy" src="/content/dam/splunk2/en_us/images/icon-library/footer/logo-splunk-corp-rgb-k-web.svg" alt="Splunk Global Footer Logo"/> <span class="sr-only">Splunk Global Footer Logo</span> </a> </div> <div class="social-band"> <div class="xfpage page basicpage"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="socialband base-component parbase aem-GridColumn aem-GridColumn--default--12">  <div class="social-band-wrapper splunk2-background none ">  <div class="social-band horizantal align-left"> <ul class="social-band__icons "> <li class="icon"> <a data-track-analytics="true" href="https://twitter.com/splunk" title="Twitter" target="_blank" data-platform="twitter" class="twitter button-wrap" rel="noopener"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Twitter</span> </a> </li> <li class="icon"> <a data-track-analytics="true" href="https://www.facebook.com/splunk" title="Facebook" target="_blank" data-platform="facebook" class="facebook button-wrap" rel="noopener"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Facebook</span> </a> </li> <li class="icon"> <a data-track-analytics="true" href="https://www.linkedin.com/company/splunk" title="Linked In" target="_blank" data-platform="linkedin" class="linkedin button-wrap" rel="noopener"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Linked In</span> </a> </li> <li class="icon"> <a data-track-analytics="true" href="https://www.youtube.com/user/splunkvideos" title="Youtube" target="_blank" data-platform="youtube" class="youtube button-wrap" rel="noopener"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Youtube</span> </a> </li> <li class="icon"> <a data-track-analytics="true" href="https://www.instagram.com/splunk/" title="Instagram" target="_blank" data-platform="instagram" class="instagram button-wrap" rel="noopener"> <div class="lazyload social-icon splunk-gray-darker social-icon-image" style="background-color: initial; color: splunk-gray-darker;"></div> <span class="sr-only">Instagram</span> </a> </li> </ul> </div> </div> </div> </div> </div> </div> </div></div> </div> <div class="footer-links"> <div class="site-map-content"><div class="site-map-item" style="text-align: right;"><a data-track-analytics="true" href="/en_us/legal.html" target="_self">Legal</a></div> <div class="site-map-item" style="text-align: right;"><a data-track-analytics="true" href="/en_us/legal/privacy-policy.html" target="_self">Privacy</a></div> <div class="site-map-item" style="text-align: right;"><a data-track-analytics="true" href="/en_us/site-map.html" target="_self">Sitemap</a></div> <div class="site-map-item" style="text-align: right;"><a id="cookie-banner" data-track-analytics="true" href="https://www.cisco.com/c/en/us/about/legal/privacy-full.html#cookies" target="_self" rel="noopener">Cookies / Do not sell or share my personal data</a></div> <div class="site-map-item" style="text-align: right;"><a data-track-analytics="true" href="/en_us/legal/terms/terms-of-use.html" target="_self">Website Terms of Use</a></div> </div> </div> <div class="copyright-text"> <p style="text-align: right;">© 2005 - 2025 Splunk LLC All rights reserved.</p> </div> </div> </div> </div> <link rel="stylesheet" href="/etc.clientlibs/splunk/core/components/content/global-nav/footer/v1/footer/clientlibs.b237588996cc8094e0be71d0164da2b1.css" type="text/css"> <script type="text/javascript" src="/etc.clientlibs/splunk/core/components/content/global-nav/footer/v1/footer/clientlibs.7325520b3e373d35dda4c4a2085bd603.js"></script> </div> </div> </div> </div> </div></div> </div>  <script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-vendors.0059f7b91f2f3b8a2e2864ac1732e5d3.js"></script><script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-dependencies.ed8148798dd55d0569a24d63070a921f.js"></script><script type="text/javascript" src="/etc.clientlibs/clientlibs/granite/jquery/granite/csrf.a9dcac4698709ca8e1cbc88363cf0793.js"></script><script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-site.ced8beeba4c2862bd716ceab675bd7ed.js"></script><script type="text/javascript" src="/etc.clientlibs/splunk/core/clientlibs/clientlib-blogsDetailPage.9d8ff265d51503560d85aa408e551c8a.js"></script> <style> @media (min-width: 768px) { .root.responsivegrid.container#splunk-main-content > .aem-Grid { min-width: 100%; margin-left: -8px; margin-right: -8px; } } </style> <script type="text/javascript"> var featureFlagRumEnable = {"rumEnable": true}; </script> <script src="https://cdn.signalfx.com/o11y-gdi-rum/latest/splunk-otel-web.js" crossorigin="anonymous" defer></script> <script src="https://cdn.signalfx.com/o11y-gdi-rum/latest/splunk-otel-web-session-recorder.js" crossorigin="anonymous" defer></script> <script> // RUM TRACING: SplunkRum.init({ beaconUrl: "https://rum-ingest.us1.signalfx.com/v1/rum", rumAuth: "ZVSRvvdlPQoFQ0GRR6eDoQ", app: "WWW-WEBMKT-AEM", environment: "WMD-PROD-PUBLISH" }); // RUM REPLAY: SplunkSessionRecorder.init({ beaconUrl: "https://rum-ingest.us1.signalfx.com/v1/rumreplay", rumAuth: "ZVSRvvdlPQoFQ0GRR6eDoQ" }); </script>      <div class="splunk-new-modal modal fade-scale in" id="splunk-new-modal" tabindex="-1" role="dialog" aria-labelledby="splunk-new-modal" aria-hidden="true"> <div class="modal-dialog modal-fullscreen" role="document"> <div class="modal-content"> <div class="modal-header"> <button type="button" class="close" data-track-analytics="true" data-dismiss="modal" aria-label="Close"> <span class="close-hidden-text modal-close" aria-hidden="true">×</span> </button> </div> <div class="modal-body"> <div class="extended-section container-fluid">  </div> <div class="modal-title splunk-superModal-title" id="splunk-new-modal-title"></div> </div> </div> </div> </div>  </body> </html>

CINXE.COM

Monitoring Bucket Health in Splunk Enterprise | Splunk