CINXE.COM
Documentation - Splunk Documentation
<!DOCTYPE html> <!--[if lt IE 7]><html class="no-js lt-ie9 lt-ie8 lt-ie7"><![endif]--> <!--[if IE 7]><html class="no-js lt-ie9 lt-ie8"><![endif]--> <!--[if IE 8]><html class="no-js lt-ie9"><![endif]--> <!--[if gt IE 8]><!--><html class="client-nojs" lang="en" dir="ltr"><!--<![endif]--> <head> <style>.hidden-column-default{display:none;}</style> <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"/> <!-- DOCS-1607-new OneTrust Cookies Consent Notice start --> <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8" data-domain-script="8ce8262c-a59d-4265-a12b-e2462f788bf4" ></script> <script type="text/javascript"> function OptanonWrapper() { } </script> <!-- DOCS-1607-new OneTrust Cookies Consent Notice end --> <!-- Google Analytics Script --> <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-TPV7TP');</script> <!-- Google Analytics Script --> <meta charset="UTF-8"/> <title>Documentation - Splunk Documentation</title> <script>document.documentElement.className = document.documentElement.className.replace( /(^|\s)client-nojs(\s|$)/, "$1client-js$2" );</script> <script>(window.RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgCanonicalNamespace":"","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":0,"wgPageName":"Documentation","wgTitle":"Documentation","wgCurRevisionId":92262,"wgRevisionId":92262,"wgArticleId":24079,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":[],"wgBreakFrames":false,"wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat":"dmy","wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgMonthNamesShort":["","Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"wgRelevantPageName":"Documentation","wgRelevantArticleId":24079,"wgRequestId":"86a8ef88070120b25fb8251f","wgIsProbablyEditable":false,"wgRelevantPageIsProbablyEditable":false,"wgRestrictionEdit":["autoconfirmed"],"wgRestrictionMove":["autoconfirmed"]});mw.loader.state({"site.styles":"ready","noscript":"ready","user.styles":"ready","user":"ready","site":"ready","user.options":"ready","user.tokens":"loading","mediawiki.legacy.shared":"ready","mediawiki.legacy.commonPrint":"ready","mediawiki.sectionAnchor":"ready","mediawiki.skinning.interface":"ready","skins.oxfordcomma.css":"ready"});mw.loader.implement("user.tokens@15caxfw",function($,jQuery,require,module){/*@nomin*/mw.user.tokens.set({"editToken":"+\\","patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"}); });mw.loader.load(["mediawiki.page.startup","mediawiki.user","mediawiki.hidpi","mediawiki.page.ready","mediawiki.searchSuggest","ext.SplunkAuth.js","ext.PonyDocs","ext.Splunk.js","skins.oxfordcomma.js","skins.oxfordcomma.top.js"]);});</script> <link rel="stylesheet" href="/load.php?debug=false&lang=en&modules=mediawiki.legacy.commonPrint%2Cshared%7Cmediawiki.sectionAnchor%7Cmediawiki.skinning.interface%7Cskins.oxfordcomma.css&only=styles&skin=oxfordcomma"/> <script async="" src="/load.php?debug=false&lang=en&modules=startup&only=scripts&skin=oxfordcomma"></script> <meta name="ResourceLoaderDynamicStyles" content=""/> <meta name="generator" content="MediaWiki 1.31.1"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <link rel="shortcut icon" href="/favicon.ico"/> <link rel="search" type="application/opensearchdescription+xml" href="/opensearch_desc.php" title="Splunk Documentation (en)"/> <link rel="EditURI" type="application/rsd+xml" href="https://docs.splunk.com/api.php?action=rsd"/> <link rel="alternate" type="application/rss+xml" title="Splunk Documentation RSS feed" href="/index.php?title=Special:RecentChanges&feed=rss"/> <link rel="alternate" type="application/atom+xml" title="Splunk Documentation Atom feed" href="/index.php?title=Special:RecentChanges&feed=atom"/> <!--[if lt IE 9]><script src="/load.php?debug=false&lang=en&modules=html5shiv&only=scripts&skin=oxfordcomma&sync=1"></script><![endif]--> <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries --> <!-- WARNING: Respond.js doesn't work if you view the page via file:// --> <!--[if lt IE 9]> <script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script> <script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script> <![endif]--> <script src="https://d7koym0rxduxm.cloudfront.net/splunk-analytics.min.js" type="text/javascript"></script> <script type="text/javascript"> var analyticsHost = "https://apps-api.splunk.com/wplt/analytics"; var applicationName = "docs-splunk"; SplunkAnalytics.service.getAppDetails(analyticsHost, applicationName).then(function(result) { var script = result.script; var applicationId = result.applicationId; script += "var applicationId = '" + applicationId + "';"; script += "var applicationName = '" + applicationName + "';"; return SplunkAnalytics.service.addScript(script); }).catch(function(err) { console.log("ERROR::loadScript::", err); }); </script> </head> <body class="mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Documentation rootpage-Documentation skin-oxfordcomma action-view"><!--googleoff: index--><style>#topnav-100009 { display: none; }</style><!--[if lt IE 7]> <p class="browsehappy">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p> <![endif]--> <!-- Start DOCS-1594 - Google Analytics --> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TPV7TP" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><!-- END DOCS-1594 - Google Analytics --> <script> var docsHtmlTags = "";var blackListedTags = "";var showCatDiff = '';var docsSelectedProductLongName = 'Splunk Cloud Services';</script> <div class="global-header-v2-wrapper" > <input type="hidden" id="userSessionInfoServlet" data-url-value="/api/bin/user/info"> <!-- @@@@ DESKTOP VARIATION 3.x--> <div class="splunk-header-v2"> <nav class="navbar navbar-default splunk-navbar navbar-fixed-top"> <!-- @@@@ Small DESKTOP VARIATION --> <div class="container-fluid top-nav custom-masthead"> <!-- LOGO START --> <div class="navbar-header"> <a data-track-analytics="true" class="navbar-brand topnav" href="https://www.splunk.com" target="_self"> <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/skins/OxfordComma/images/splunkicons/splunk-logo-dark.svg" alt="logo"> <span class="sr-only">logo</span> </span> </a> </div> <!-- LOGO Ends --> <!-- TOP RIGHT Nav Bar START --> <ul class="nav navbar-nav navbar-right navbar-right-mobile"> <!-- <li id="topnav-100007"> Repeat below li element for each link --> <li class="nav-item-component mega-menu-nav saf-no-transition navItem-right" id="topnav-100005"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Support <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-scroll-container"> <div class="subnav-container"> <!-- start of left container --> <!-- start of right container --> <!-- start of standalone container --> <div class="subnav__standalone splunk-color splunk2-background-white"> <div class="subnav__standalone-item"> <div class="subnav__standalone-item-list"> <div> <div class="list-item base-component parbase"> <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none default speakerDetail-spacer"> <div class="feature-listitem leftIconPosition"> <div class="content-body"> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="http://login.splunk.com/page/sso_redirect?type=portal" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Support Portal </a> </h5> <div class="desc">Submit a case ticket</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Splunk Answers </a> </h5> <div class="desc">Ask Splunk experts questions</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/customer-success/support-programs.html" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Support Programs </a> </h5> <div class="desc">Find support service offerings</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact Us </a> </h5> <div class="desc">Contact our customer support </div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/product-security.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Security Updates </a> </h5> <div class="desc">Keep your data secure</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </a> </h5> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </li> <!-- Languages Section Start --> <!-- End Languages Section --> <!-- User Section Start --> <li class="dropdown focus-enabled" id="topnav-100007"> <a href="#" class="dropdown-toggle cm-link topnav addCarotIcon" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-"> <div class="splunk-user-avatar hidden"> <span class="loginUserNameIcon"></span> <span class="splunk-icon icon-chevron-down"></span> </div> <span class="splunk-icon icon-expanded-user-icon"> <span class="sr-only">Click User Account</span> </span> <span class="caret"></span> </a> <ul id="account" class="dropdown-menu cm-dropdown icon-flyout account"> <li class=""> <a id="loginId" data-track-analytics="true" href="http://docs.splunk.com/Documentation?saml=true&redirecturl=https://docs.splunk.com%2FDocumentation" target="_self" class="topnav">Login</a> </li> <li class=""> <a id="signId" data-track-analytics="true" href="http://idp.login.splunk.com/signin/register?redirecturl=https://docs.splunk.com/Documentation" target="_self" class="topnav">Sign Up</a> </li> </ul> </li> <!-- End User Section --> </ul> <!-- END TOP RIGHT Nav Bar --> </div> <!-- @@@@ SMALL DESKTOP VARIATION Ends--> <!-- @@@ LARGE DESKTOP VARIATION --> <div class="container-fluid no-padding"> <!-- Brand and toggle get grouped for better mobile display --> <div class="navbar-header bottom-nav"> <a data-track-analytics="true" class="navbar-brand topnav" target="_self" href="https://www.splunk.com"> <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/skins/OxfordComma/images/splunkicons/splunk-logo-dark.svg" alt="logo"> <span class="sr-only">logo</span> </span> </a> </div> <!-- Collect the nav links, forms, and other content for toggling (removed unused class="collapse navbar-collapse") --> <div class="collapse navbar-collapse" id="collapsableNavbar"> <!-- LeftNav Section Start --> <ul class="nav navbar-nav navbar-left masthead"> <li class="nav-item-component mega-menu-nav saf-no-transition navItem-left" id="topnav-100001"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Products <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-scroll-container"> <div class="subnav-container"> <!-- start of left container --> <div class="subnav__left splunk-color splunk2-background-white"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalabel="Learn more" data-ctalink="https://www.splunk.com/en_us/products.html" data-ctatarget="_self"> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/products.html" class="header" data-track-analytics="true" style="text-decoration:none;">Product Overview</a> <div class="list-description">A data platform built for expansive data access, powerful analytics and automation</div> <a data-track-analytics="true" class="splunk-btn list__cta sp-btn-borderless sp-btn-pink" href="https://www.splunk.com/en_us/products.html" target="_self"> Learn more </a> </div> </div> </div> </div> </div> </div> <div class="subnav__left-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition noHeader eyebrowExists hideSendBottomMobileListItem"> <div class="brow">MORE FROM SPLUNK</div> <div class="content-body"> <ul class="list__items items__sendToBottom"> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/skins/OxfordComma/images/splunkicons/pricing.svg" alt="/skins/OxfordComma/images/splunkicons/pricing.svg" > </div> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/pricing.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Pricing </a> </h5> </div> </li> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/skins/OxfordComma/images/splunkicons/download.svg" alt="/skins/OxfordComma/images/splunkicons/download.svg" > </div> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/download.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Free Trials & Downloads </a> </h5> </div> </li> </ul> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within left container--> </div> <!-- start of right container --> <!-- start of standalone container --> <!-- start of left container --> <!-- start of right container --> <div class="subnav__right splunk-color splunk-gray-lightest"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition"> <div class="feature-content secondary-header"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <a href="https://www.splunk.com/en_us/products/platform.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray"> Platform </a> </div> </div> </div> <div class="content-body"> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/splunk-cloud-platform.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta">Splunk Cloud Platform</a> </h5> <div class="desc">Cloud-powered insights for petabyte-scale data analytics across the hybrid cloud</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/products/splunk-enterprise.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise </a> </h5> <div class="desc">Search, analysis and visualization for actionable insights from all of your data</div> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div> <div class="list-item base-component parbase"> <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none default speakerDetail-spacer"> <div class="feature-listitem leftIconPosition"> <div class="feature-content secondary-header"> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <a href="https://www.splunk.com/en_us/products/cyber-security.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray"> Security </a></div> </div> </div> <div class="content-body"> <ul class="list__items"> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/enterprise-security.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Enterprise Security </a> </h5> <div class="desc">Analytics-driven SIEM to quickly detect and respond to threats</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/products/splunk-security-orchestration-and-automation.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk SOAR </a> </h5> <div class="desc">Security orchestration, automation and response to supercharge your SOC</div></div> </li> </ul> </div> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase"> <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-md mobile-spacer-bottom-margin-none splunk-gray-light default speakerDetail-spacer"> <div class="feature-listitem leftIconPosition"> <div class="feature-content secondary-header "> <div class="content-wrapper"> <div class="header splunk-image-smallericon"> <a href="https://www.splunk.com/en_us/products/observability.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray"> Observability </a> </div> </div> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/products/infrastructure-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Infrastructure Monitoring </a> </h5> <div class="desc">Instant visibility and accurate alerts for improved hybrid cloud performance</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/products/apm-application-performance-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Application Performance Monitoring </a> </h5> <div class="desc">Full-fidelity tracing and always-on profiling to enhance app performance</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/products/it-service-intelligence.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk IT Service Intelligence </a> </h5> <div class="desc">AIOps, incident intelligence and full visibility to ensure service performance</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within right container--> <div class="subnav__bottomContainer"> <div class="subnav__bottomContainer-item"> <div class="subnav__bottomContainer-item-list"> <div class="base-component parbase section splunk-button-aem"> <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta standalone style" href="https://www.splunk.com/en_us/products.html" data-track-analytics="true" target="_self" data-target="#"> <span class="ga-cta ">View all products</span> </a> </div> </div> <div class="subnav__bottomContainer-item-list"> </div> </div> </div> </div> <!-- start of standalone container --> </div> </div> </div> </li> <li class="nav-item-component mega-menu-nav saf-no-transition navItem-left" id="topnav-100002"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Solutions <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-scroll-container"> <div class="subnav-container"> <!-- start of left container --> <div class="subnav__left splunk-color splunk2-background-white" style="padding:21px 40px;"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition noHeader eyebrowExists "> <div class="brow">KEY INItiatives</div> <div class="content-body"> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/solutions/cloud-transformation.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cloud Transformation </a> </h5> <div class="desc">Transform your business in the cloud with Splunk</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/solutions/business-resilience.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Business Resilience </a> </h5> <div class="desc">Build resilience to meet today’s unpredictable business challenges</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <a href="https://www.splunk.com/en_us/solutions/digital-customer-experience.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Digital Customer Experience </a> </h5> <div class="desc">Deliver the innovative and seamless experiences your customers expect</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within left container--> </div> <!-- start of right container --> <!-- start of standalone container --> <!-- start of left container --> <!-- start of right container --> <div class="subnav__right splunk-color splunk2-background-gray"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists"> <div class="brow ">by Use Case</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/advanced-threat-detection.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Advanced Threat Detection </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/application-modernization.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Application Modernization </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/cloud-migration.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Cloud Migration </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/incident-investigation-and-forensics.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Incident Investigation & Forensics </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/it-modernization.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> IT Modernization </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/automate-and-orchestrate-the-soc.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SOC Automation & Orchestration </a> </h5> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists"> <div class="brow ">BY TECHNOLOGY</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/aws-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> AWS </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/microsoft-azure-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Azure </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/gcp-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> GCP </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/kubernetes-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Kubernetes </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/opentelemetry.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> OpenTelemetry </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/sap-monitoring.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SAP </a> </h5> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div> <div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists"> <div class="brow ">BY INDUSTRY</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/aerospace-defense.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Aerospace & Defense </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/energy-and-utilities.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Energy & Utilities </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/financial-services.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Financial Services </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/healthcare.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Healthcare </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/higher-education.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Higher Education </a> </h5> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/solutions/industries/public-sector.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Public Sector </a> </h5> </div> </li> </ul> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within right container--> <div class="subnav__bottomContainer"> <div class="subnav__bottomContainer-item"> <div class="subnav__bottomContainer-item-list"> <div class="splunk-button base-component parbase section"> <a class="splunk-btn multiline sp-btn-borderless sp-btn-darkGray none ga-cta standalone style " href="https://www.splunk.com/en_us/solutions.html" data-track-analytics="true" target="_self" data-target="#" data-is-back-button="false" data-modalcontent-bookmarkable="false"> <span class="ga-cta ">View All Solutions</span> </a> </div> </div> <div class="subnav__bottomContainer-item-list"> </div> <div class="subnav__bottomContainer-item-list"> </div> </div> </div> </div> <!-- start of standalone container --> </div> </div> </div> </li> <li class="nav-item-component mega-menu-nav navItem-left" id="topnav-100003"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true" style="text-decoration:none;" >Why Splunk? <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-container"> <!-- start of left container --> <div class="subnav__left splunk-color splunk2-background-white"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div><div class="list-item base-component parbase"> <div class="feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalabel="Learn More" data-ctalink="https://www.splunk.com/en_us/about-us/why-splunk.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon" data-src="/skins/OxfordComma/images/splunkicons/network-data.svg" alt="global" src="/skins/OxfordComma/images/splunkicons/network-data.svg" data-loaded="true"> </div> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/about-us/why-splunk.html" class="header" data-track-analytics="true" style="text-decoration:none;">Why Splunk?</a> <div class="list-description">Bring data to every question, decision and action across your organization.</div> <a data-track-analytics="true" class="splunk-btn list__cta sp-btn-borderless sp-btn-pink" href="https://www.splunk.com/en_us/about-us/why-splunk.html" target="_self"> Learn More </a> </div> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within left container--> </div> <!-- start of right container --> <!-- start of standalone container --> <!-- start of left container --> <!-- start of right container --> <div class="subnav__right splunk-color splunk2-background-gray"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12"> <div class="feature-listitem leftIconPosition"> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/customers.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Stories </a> </h5> <div class="desc">See why organizations around the world trust Splunk.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/partners.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Partners </a> </h5> <div class="desc">Accelerate value with our powerful partner ecosystem.</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12"> <div class="feature-listitem leftIconPosition"> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="/en_us/careers/diversity.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Diversity, Equity & Inclusion </a> </h5> <div class="desc">Learn how we support change for customers and communities.</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within right container--> </div> <!-- start of standalone container --> </div> </div> </li> <li class="nav-item-component mega-menu-nav navItem-left" id="topnav-100004"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Resources <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-container"> <!-- start of left container --> <div class="subnav__left splunk-color splunk2-background-white"> <div class="subnav__left-item"> <div class="subnav__left-item-list"> <div class="subnav__layout-container"><div class="responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12"> <div class="feature-listitem primaryLayout iconAlignTop"> <div class="brow">MORE FROM SPLUNK</div> <div class="feature-content" data-ctalink="https://www.splunk.com/en_us/resources.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon hfLazyLoad" data-src="/skins/OxfordComma/images/splunkicons/header-resources.svg" src="/skins/OxfordComma/images/splunkicons/header-resources.svg" alt="Resources"> </div> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/resources.html" class="header addHoverEffect" data-track-analytics="true">Resources</a> <div class="list-description">Explore e-books, white papers and more.</div> </div> </div> </div> </div> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12"> <div class="feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="https://www.splunk.com/en_us/about-us/events.html" data-ctatarget="_self"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon hfLazyLoad" data-src="/skins/OxfordComma/images/splunkicons/header-events.svg" src="/skins/OxfordComma/images/splunkicons/header-events.svg" alt="Events"> </div> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/about-us/events.html" class="header addHoverEffect" data-track-analytics="true">Events</a> <div class="list-description">Join us at an event near you.</div> </div> </div> </div> </div> <div class="list-item base-component parbase aem-GridColumn aem-GridColumn--default--12"> <div class="feature-listitem primaryLayout iconAlignTop"> <div class="feature-content" data-ctalink="https://www.splunk.com/en_us/blog" data-ctatarget="_blank"> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallericon hfLazyLoad" data-src="/skins/OxfordComma/images/splunkicons/header-blogs.svg" src="/skins/OxfordComma/images/splunkicons/header-blogs.svg" alt="Blogs"> </div> <div class="content-wrapper"> <a href="https://www.splunk.com/en_us/blog" class="header addHoverEffect" data-track-analytics="true">Blogs</a> <div class="list-description">See what Splunk is doing.</div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within left container--> </div> <!-- start of right container --> <!-- start of standalone container --> <!-- start of left container --> <!-- start of right container --> <div class="subnav__right splunk-color splunk2-background-gray"> <div class="subnav__right-item"> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">GET STARTED</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://lantern.splunk.com/" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="noopener"> Splunk Lantern </a> </h5> <div class="desc">Splunk experts provide clear and actionable guidance.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/customer-success.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Customer Success </a> </h5> <div class="desc">Customer success starts with data success.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/get-started.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Get Started With Splunk </a> </h5> <div class="desc">Learn how to use Splunk.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/data-insider.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Data Insider </a> </h5> <div class="desc">Read focused primers on disruptive technology topics.</div> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">become an expert</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/training.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Splunk Training & Certification </a> </h5> <div class="desc">Become a certified Splunk Expert.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://docs.splunk.com/Documentation" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="noopener"> Documentation </a> </h5> <div class="desc">Find answers about how to use Splunk.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://usergroups.splunk.com/" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="noopener"> User Groups </a> </h5> <div class="desc">Meet Splunk enthusiasts in your area.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/community.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Community </a> </h5> <div class="desc">Share knowledge and inspiration.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/surge.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> SURGe </a> </h5> <div class="desc">Access timely security research and guidance.</div> </div> </li> </ul> </div> </div> </div> </div> </div> <div class="subnav__right-item-list"> <div><div class="list-item base-component parbase"> <div class="feature-listitem leftIconPosition eyebrowExists "> <div class="brow ">Expand & optimize</div> <div class="feature-content secondary-header "> </div> <div class="content-body "> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://www.splunk.com/en_us/customer-success.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Services & Support </a> </h5> <div class="desc">It’s easy to get the help you need.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://splunkbase.splunk.com/" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="noopener"> Splunkbase </a> </h5> <div class="desc">See Splunk’s 1,000+ Apps and Add-ons.</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5 sub_h5"> <!--sub_h5 class will act as subsitute for h5 WWW-19201--> <a href="https://dev.splunk.com/" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="noopener"> Splunk Dev </a> </h5> <div class="desc">Create your own Splunk Apps.</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> <!-- start of bottom container within right container--> </div> <!-- start of standalone container --> </div> </div> </li> <li class="nav-item-component mega-menu-nav saf-no-transition navItem-left" id="topnav-100005"> <div class="navItem"> <a data-track-analytics="true" class="navItem-link" href="/Splexicon" disabled="disabled" aria-expanded="false" aria-haspopup="false">Splexicon </a> </div> </li> </ul> <!-- End LeftNav Section --> <!-- BOTTOM RIGHT Nav Bar START --> <ul class="nav navbar-nav navbar-right bottom-nav"> <!-- <li id="topnav-100007"> LeftNav Section Start -Repeat below li element for each link --> <li class="nav-item-component mega-menu-nav saf-no-transition navItem-right" id="topnav-100008"> <div class="navItem flyout-navItem"> <a data-track-analytics="true" class="navItem-link" href="#" disabled="disabled" aria-expanded="false" aria-haspopup="true">Support <span class="splunk-icon icon-chevron-down"></span> </a> </div> <div class="flyoutWrapper"> <div class="subnav-scroll-container"> <div class="subnav-container"> <!-- start of left container --> <!-- start of right container --> <!-- start of standalone container --> <div class="subnav__standalone splunk-color splunk2-background-white"> <div class="subnav__standalone-item"> <div class="subnav__standalone-item-list"> <div> <div class="list-item base-component parbase"> <div class="desktop-spacer-top-margin-none desktop-spacer-bottom-margin-none mobile-spacer-top-margin-none mobile-spacer-bottom-margin-none default speakerDetail-spacer"> <div class="feature-listitem leftIconPosition noHeader "> <div class="content-body"> <ul class="list__items "> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="http://login.splunk.com/page/sso_redirect?type=portal" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Support Portal </a> </h5> <div class="desc">Submit a case ticket</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://community.splunk.com/t5/Splunk-Answers/ct-p/en-us-splunk-answers" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Splunk Answers </a> </h5> <div class="desc">Ask Splunk experts questions</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/customer-success/support-programs.html" target="_blank" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta" rel="nofollow noopener noreferrer"> Support Programs </a> </h5> <div class="desc">Find support service offerings</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/products/system-status.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> System Status </a> </h5> <div class="desc">View detailed status</div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/about-splunk/contact-us.html#customer-support" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Contact Us </a> </h5> <div class="desc">Contact our customer support </div> </div> </li> <li> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/product-security.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Product Security Updates </a> </h5> <div class="desc">Keep your data secure</div> </div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </li> <!-- End RightNav Section --> <!-- Search Section Start --> <li class="dropdown mega-menu-nav mysearchbox" id="topnav-100008"> <a href="#" class="dropdown-toggle search-icon topnav" aria-haspopup="true" aria-expanded="false"> <span class="splunk-icon icon-expanded-search-icon"><span class="sr-only">Click Search</span></span> <span class="search-help-text hidden">Help</span> </a> <div id="search-header-container" class="dropdown-menu search-container" style="margin-top:-1px;"> <div class="input-group"> <form action="https://www.splunk.com/en_us/search.html" role="search" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__"> <input type="hidden" name="product" id="product" value="SCS"/> <input type="hidden" name="version" id="version" value="current"/> <input class="form-control mm-input" placeholder="Search splunk.com" type="text" value="" id="query" name="query" aria-label="Search"> </form> </div> </div> </li> <!-- End Search Section --> <!-- @@@@@ Language Section --> <!-- @@@@@ Language Dropdown Ends --> <!-- User Section Start --> <li class="dropdown focus-enabled" id="topnav-100011"> <a href="#" class="dropdown-toggle cm-link topnav addCarotIcon" role="button" aria-haspopup="true" aria-expanded="false" id="Top_Nav-"> <div class="splunk-user-avatar hidden"> <span class="loginUserNameIcon"></span> <span class="splunk-icon icon-chevron-down"></span> </div> <span class="splunk-icon icon-expanded-user-icon"> <span class="sr-only">Click User Account</span> </span> <span class="caret"></span> </a> <ul id="account" class="dropdown-menu cm-dropdown icon-flyout account"> <li class=""> <a id="loginId" data-track-analytics="true" href="http://docs.splunk.com/Documentation?saml=true&redirecturl=https://docs.splunk.com%2FDocumentation" target="_self" class="topnav">Login</a> </li> <li class=""> <a id="signId" data-track-analytics="true" href="http://idp.login.splunk.com/signin/register?redirecturl=https://docs.splunk.com/Documentation" target="_self" class="topnav">Sign Up</a> </li> </ul> </li> <!-- End User Section --> <!-- Free Splunk Section Start --> <!-- <li id="topnav-100012"> <div class="free-splunk"> <a data-track-analytics="true" href="/en_us/download.html" id="free-splunk-click-desktop" data-toggle="modal" data-target="#iframe-modal" class="btn hidden-xs express-lane-open topnav"> Free Splunk </a> </div> </li> --> <!-- End Free Splunk Section --> </ul> <ul class="nav navbar-nav navbar-right top-nav"> <!-- Search Section Start --> <li class="dropdown mega-menu-nav search-icon-conatiner mysearchbox" id="topnav-100013"> <a href="#" class="dropdown-toggle search-icon topnav" aria-haspopup="true" aria-expanded="false"> <span class="splunk-icon icon-expanded-search-icon"><span class="sr-only">Click Search</span></span> <span class="search-help-text hidden">Help</span> </a> <div id="search-container" class="dropdown-menu search-container" style="margin-top:-1px;"> <div class="input-group"> <form action="https://www.splunk.com/en_us/search.html" role="search" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__"> <input type="hidden" name="product" id="product" value="SCS"/> <input type="hidden" name="version" id="version" value="current"/> <input class="form-control mm-input" placeholder="Search splunk.com" type="text" value="" id="query" name="query" aria-label="Search"> </form> </div> </div> </li> <!-- End Search Section --> <!-- <li id="topnav-100014"> <div class="free-splunk"> <a data-track-analytics="true" href="/en_us/download.html" id="free-splunk-click-desktop" data-toggle="modal" data-target="#iframe-modal" class="btn hidden-xs express-lane-open topnav"> Free Splunk </a> </div> </li> --> </ul> <!-- END BOTTOM RIGHT Nav Bar --> </div> <!-- /.navbar-collapse --> </div> <!-- /.container-fluid --> <!-- LARGE DESKTOP VARIATION --> </nav> </div> <!-- @@ Mobile Variation --> <div class="splunk-header-v2-mobile "> <nav> <div class="header-main"> <!-- Header Experience Fragment for Mobile --> <a data-track-analytics="true" class="logo topnav" target="_self" href="https://www.splunk.com" > <span class="logo-wrapper"> <img class="splunk-logo logo-image" src="/skins/OxfordComma/images/splunkicons/splunk-logo-dark.svg" alt="logo"> <span class="sr-only">logo</span> </span> </a> <!-- Header Experience Fragment for Mobile Ends --> <!-- Free SPlunk Button --> <!-- <a href="/en_us/download.html" data-track-analytics="true" id="free-splunk-click-mobile" data-toggle="modal" data-target="#iframe-modal" class="free-splunk-mobile explress-lane-open express-lane-open topnav"> Free Splunk </a> --> <!-- Hamburger Menu --> <div class="hamburger-container-wrapper collapsed" data-toggle="collapse" data-target="#header-collapse" aria-expanded="false"> <div class="hamburger hamburger--boring" type="button"> <span class="hamburger-box"> <span class="hamburger-inner"></span> </span> </div> </div> </div> <div class="header-collapse collapse" id="header-collapse"> <div class="top-links"> <!-- Login / Signup Section --> <div id="mobile-account" class="account-items"> <div class="splunk-user-avatar hidden"> <span class="loginUserNameIcon"></span> </div> <span class="splunk-icon icon-expanded-user-icon"></span> <a id="loginId" data-track-analytics="true" class="topnav" href="http://docs.splunk.com/Documentation?saml=true&redirecturl=https://docs.splunk.com%2FDocumentation" target="_self"> Login </a> | <a id="signId" data-track-analytics="true" class="topnav" href="http://idp.login.splunk.com/signin/register?redirecturl=https://docs.splunk.com/Documentation" target="_self"> Sign Up </a> </div> <div class="langLinks"> <ul class="list__items items__sendToBottom"> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/skins/OxfordComma/images/splunkicons/pricing.svg" alt="/skins/OxfordComma/images/splunkicons/pricing.svg" > </div> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/products/pricing.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Pricing </a> </h5> </div> </li> <li> <div class="list-wrapper"> <img class="listIcon splunk-image splunk-image-smallesticon" src="/skins/OxfordComma/images/splunkicons/download.svg" alt="/skins/OxfordComma/images/splunkicons/download.svg" > </div> <div class="list-details"> <h5 class="splunk2-h5"> <a href="https://www.splunk.com/en_us/download.html" target="_self" data-track-analytics="true" class="splunk-btn sp-btn-borderless sp-btn-darkGray list-cta"> Free Trials & Downloads </a> </h5> </div> </li> </ul> </div> </div> <!-- Search Form --> <div class="bottom-links"> <div class="search-icon-container"> <div data-track-analytics="true" class="mobile-search-container"> <span class="splunk-icon icon-expanded-search-icon" aria-label="Search"></span> <div class="search searchText">Search</div> <span class="search search-help-text hidden">Help</span> <div class="input-form"> <div class="input-group"> <form action="https://www.splunk.com/en_us/search.html" role="search" id="searchForm" method="get" __bizdiag="107944136" __biza="WJ__"> <input type="hidden" name="product" id="product" value="SCS"/> <input type="hidden" name="version" id="version" value="current"/> <input class="form-control mm-input" placeholder="Search splunk.com" type="text" value="" id="query" name="query" aria-label="Search"> </form> </div> </div> </div> </div> </div> </div> </nav> </div> <!-- @@ Mobile Variation Ends --> </div> <script type='text/javascript' language='JavaScript' src='/skins/OxfordComma/js/splunkHeaderJS.js'></script> <!--Splunk search web component CDN--> <script src='/skins/OxfordComma/js/search-bar.js' type="text/javascript"> </script> <script defer onload="renderSplunkSearchBarComponent()" src="https://d221cp5lqk6y64.cloudfront.net/1.1.49/searchBar.js" type="text/javascript"> </script> <!--Splunk search web component CDN--> <script src='/skins/OxfordComma/js/search-component.js' type="text/javascript"> </script> <script defer onload="renderSplunkSearchUiComponent()" src="https://d221cp5lqk6y64.cloudfront.net/1.1.49/search.js" type="text/javascript"> </script> <div class="hero-promo"><a href="https://reg.rainfocus.com/flow/splunk/conf24lasveg/conf24globalbroadcast/page/globalbroadcasthome" target="_blank"></a></div> <section id="homepage-hero"> <div class="container"> <div class="row"> <div class="col-lg-12 col-md-12 col-xs-12"> <div class="documentation-flex"> <div class="doc-flex"> <h1>Documentation</h1> </div> <div id="search-landing-container" class="doc-flex"></div> </div> <div class="splexicon-search-container"> <div class="splex-container"> <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none"> <path fill-rule="evenodd" clip-rule="evenodd" d="M3.31569 19.4489C2.96623 19.5153 2.6759 19.4991 2.41529 19.3112C2.15452 19.1233 2 18.8214 2 18.5V6C2 5.47057 2.40629 5.1632 2.83404 4.94932C3.06132 4.83568 3.38627 4.69215 3.80877 4.55132C4.65519 4.26918 5.88682 4 7.5 4C9.17276 4 10.4499 4.41943 11.3222 4.85557C11.5858 4.98738 11.8117 5.12031 12 5.24301C12.1883 5.12031 12.4142 4.98738 12.6778 4.85557C13.5501 4.41943 14.8272 4 16.5 4C18.1132 4 19.3448 4.26918 20.1912 4.55132C20.6621 4.70828 21.1354 4.8984 21.5547 5.16795C21.8329 5.35342 22 5.66565 22 6V18.5C22 18.8214 21.8455 19.1233 21.5847 19.3112C21.3241 19.4991 21.0338 19.5153 20.6843 19.4489C20.6405 19.4405 20.6188 19.4336 20.5901 19.4244L20.571 19.4184L20.5571 19.4141C20.5369 19.408 20.5115 19.4008 20.4762 19.392C20.3141 19.3515 20.0589 19.2944 19.7106 19.2364C19.0142 19.1203 17.9442 19 16.5 19C15.1719 19 14.5194 19.3292 14.225 19.55C14.072 19.6648 13.9564 19.8145 13.8432 19.9609C13.6307 20.2361 13.4269 20.5 13 20.5H12.01C12.0067 20.5 12.0033 20.5 12 20.5C11.9967 20.5 11.9933 20.5 11.99 20.5H11C10.5731 20.5 10.3693 20.2361 10.1568 19.9609C10.0436 19.8145 9.92804 19.6648 9.775 19.55C9.4806 19.3292 8.82813 19 7.5 19C6.05584 19 4.98582 19.1203 4.2894 19.2364C3.94109 19.2944 3.81923 19.3158 3.52379 19.392C3.49151 19.4003 3.46515 19.4085 3.43995 19.4163C3.40148 19.4283 3.3657 19.4394 3.31569 19.4489ZM11 17.9689V6.98026C10.8586 6.88267 10.6678 6.76444 10.4278 6.64443C9.80007 6.33057 8.82724 6 7.5 6C6.11318 6 5.09481 6.23082 4.44123 6.44868C4.2694 6.50596 4.12233 6.5625 4 6.61397V17.2571C4.80256 17.1255 5.9694 17 7.5 17C9.17187 17 10.2694 17.4208 10.975 17.95L11 17.9689ZM13 17.9689L13.025 17.95C13.7306 17.4208 14.8281 17 16.5 17C18.0306 17 19.1974 17.1255 20 17.2571V6.61397C19.8777 6.5625 19.7306 6.50596 19.5588 6.44868C18.9052 6.23082 17.8868 6 16.5 6C15.1728 6 14.1999 6.33057 13.5722 6.64443C13.3322 6.76444 13.1414 6.88267 13 6.98026V17.9689Z" fill="#363C44"/> </svg> <span> <label for="">Splexicon </label> the Splunk glossary</span> </div> </div> <!-- <img src="--><!--" class="logo" alt="Splunk Docs" /><br />--> <!-- <div id="search-landing-container"></div>--> </div> </div> </div> </section> <section id="homepage-body"> <div class="container"> <div class="row"> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Core_products.png?2.1" class="img-category" alt="Platform" /> Platform </h2> <ul class="list-unstyled items-list" id="Platform"> <li> <a href="/Documentation/SplunkCloud">Splunk Cloud Platform<sup>™</sup></a> </li> <li> <a href="/Documentation/Splunk">Splunk<sup>®</sup> Enterprise</a> </li> <li> <a href="/Documentation/Forwarder">Splunk<sup>®</sup> Universal Forwarder</a> </li> <li> <a href="/Documentation/SCS">Splunk<sup>®</sup> Cloud Services</a> </li> </ul> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Core_products.png?2.1" class="img-category" alt="Security" /> Security </h2> <ul class="list-unstyled items-list" id="Security"> <li> <a href="/Documentation/AttackAnalyzer">Splunk<sup>®</sup> Attack Analyzer</a> </li> <li> <a href="/Documentation/AssetRiskIntel">Splunk<sup>®</sup> Asset and Risk Intelligence</a> </li> <li> <a href="/Documentation/ES">Splunk<sup>®</sup> Enterprise Security</a> </li> <li> <a href="/Documentation/MC">Splunk<sup>®</sup> Mission Control</a> </li> <li> <a href="/Documentation/SOAR">Splunk<sup>®</sup> SOAR (Cloud)</a> </li> <li> <a href="/Documentation/SOARonprem">Splunk<sup>®</sup> SOAR (On-premises)</a> </li> <li> <a href="/Documentation/UBA">Splunk<sup>®</sup> User Behavior Analytics</a> </li> <li> <a href="/Documentation/SSE">Splunk<sup>®</sup> Security Essentials</a> </li> <li> <a href="/Documentation/ESCU">Splunk<sup>®</sup> Enterprise Security Content Update</a> </li> <li> <a href="/Documentation/SAPSecurity">Splunk<sup>®</sup> Security for SAP<sup>®</sup> solutions</a> </li> </ul> <div> <a class="more" href="#Security">Show more <span class="caret-right"></span></a> </div> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Core_products.png?2.1" class="img-category" alt="IT" /> IT </h2> <ul class="list-unstyled items-list" id="IT"> <li> <a href="/Documentation/ITOps/current/Overview/Overview">IT Operations Overview</a> </li> <li> <a href="/Documentation/ITSI">Splunk<sup>®</sup> IT Service Intelligence</a> </li> <li> <a href="/Documentation/ITEWork">Splunk<sup>®</sup> IT Essentials Work</a> </li> <li> <a href="/Documentation/ITELearn">Splunk<sup>®</sup> IT Essentials Learn</a> </li> <li> <a href="/Documentation/ContentPackApp">Splunk<sup>®</sup> App for Content Packs</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/sp-oncall/admin/get-started/getting-started-spoc.html" title="External link to Splunk<sup>®</sup> On-Call">Splunk<sup>®</sup> On-Call</a> </li> </ul> </div> </div> <div class="row"> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Core_products.png?2.1" class="img-category" alt="Observability" /> Observability </h2> <ul class="list-unstyled items-list" id="Observability"> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/" title="External link to Splunk<sup>®</sup> Observability Cloud">Splunk<sup>®</sup> Observability Cloud</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/infrastructure/intro-to-infrastructure.html#nav-Introduction-to-Splunk-Infrastructure-Monitoring" title="External link to Splunk<sup>®</sup> Infrastructure Monitoring">Splunk<sup>®</sup> Infrastructure Monitoring</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/apm/intro-to-apm.html#nav-Introduction-to-Splunk-APM" title="External link to Splunk<sup>®</sup> APM">Splunk<sup>®</sup> APM</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/logs/lo-connect-landing.html" title="External link to Splunk<sup>®</sup> Log Observer Connect">Splunk<sup>®</sup> Log Observer Connect</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/rum/intro-to-rum.html#nav-Introduction-to-Splunk-RUM" title="External link to Splunk<sup>®</sup> Real User Monitoring">Splunk<sup>®</sup> Real User Monitoring</a> </li> <li> <a target="_blank" href="https://docs.splunk.com/observability/en/synthetics/intro-synthetics.html#nav-Introduction-to-Splunk-Synthetic-Monitoring" title="External link to Splunk<sup>®</sup> Synthetic Monitoring">Splunk<sup>®</sup> Synthetic Monitoring</a> </li> </ul> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Apps_and_add-ons.png?2.1" class="img-category" alt="Apps and add-ons" /> Apps and add-ons </h2> <ul class="list-unstyled items-list" id="Apps_and_add-ons"> <li> <a href="/Documentation/AddOns">Splunk<sup>®</sup> Supported Add-ons</a> </li> <li> <a target="_blank" href="https://github.com/signalfx/splunk-otel-collector-chart/blob/main/README.md" title="External link to Splunk<sup>®</sup> OpenTelemetry Collector for Kubernetes">Splunk<sup>®</sup> OpenTelemetry Collector for Kubernetes</a> </li> <li> <a href="/Documentation/OTC/1.3.2/manual/About">Splunk<sup>®</sup> Add-on for OpenTelemetry Collector</a> </li> <li> <a href="/Documentation/AddonBuilder/4.4.1/UserGuide/Overview">Splunk<sup>®</sup> Add-on Builder</a> </li> <li> <a href="/Documentation/FirehoseNozzleTanzu/1.3.0/User/About">Splunk<sup>®</sup> Firehose Nozzle for VMware Tanzu</a> </li> <li> <a href="/Documentation/KafkaConnect/2.2.2/User/About">Splunk<sup>®</sup> Connect for Kafka</a> </li> <li> <a href="/Documentation/ZoomConnect/1.2.1/User/About">Splunk<sup>®</sup> Connect for Zoom</a> </li> <li> <a href="/Documentation/Mobile">Splunk<sup>®</sup> Connected Experiences</a> </li> <li> <a href="/Documentation/AppD/3.0.0/AddOn/About">Splunk Add-on for AppDynamics</a> </li> <li> <a href="/Documentation/MLApp">Splunk<sup>®</sup> Machine Learning Toolkit</a> </li> <li> <a href="/Documentation/DSDL">Splunk<sup>®</sup> App for Data Science and Deep Learning</a> </li> <li> <a href="/Documentation/AnomalyApp">Splunk<sup>®</sup> App for Anomaly Detection</a> </li> <li> <a href="/Documentation/AIAssistant/1.0.6/User/AboutAIAssistant">Splunk<sup>®</sup> AI Assistant for SPL</a> </li> <li> <a href="/Documentation/CIM/6.0.2/User/Overview">Splunk<sup>®</sup> Common Information Model Add-on</a> </li> <li> <a href="/Documentation/DashApp/0.9.0/DashApp/IntroFrame">Splunk<sup>®</sup> Dashboards App</a> </li> <li> <a href="/Documentation/InfoSec">Splunk<sup>®</sup> InfoSec App</a> </li> <li> <a href="/Documentation/LookupEditor/4.0.5/User/AboutLookupApp">Splunk<sup>®</sup> App for Lookup File Editing</a> </li> <li> <a href="/Documentation/UpgradeReadiness/2.2.0/Use/About">Splunk<sup>®</sup> Platform Upgrade Readiness App</a> </li> <li> <a href="/Documentation/DBX">Splunk<sup>®</sup> DB Connect</a> </li> <li> <a href="/Documentation/ODBC">Splunk<sup>®</sup> ODBC Driver</a> </li> <li> <a href="/Documentation/StreamApp">Splunk Stream<sup>™</sup></a> </li> <li> <a href="/Documentation/Dataset/1.0/Use/AbouttheSplunkDatasetsAdd-on">Splunk<sup>®</sup> Datasets Add-on</a> </li> <li> <a href="/Documentation/AWSsecurity">Splunk<sup>®</sup> App for AWS Security Dashboards</a> </li> <li> <a href="/Documentation/DM">Data Manager</a> </li> <li> <a href="/Documentation/PCI">Splunk<sup>®</sup> App for PCI Compliance</a> </li> <li> <a href="/Documentation/TA-ueba/3.1.0/GoToSplunkUBADocs/About">Splunk<sup>®</sup> Add-on for Splunk UBA</a> </li> <li> <a href="/Documentation/WindowsAddOn/8.1.2/User/AbouttheSplunkAdd-onforWindows">Splunk<sup>®</sup> Add-on for Windows</a> </li> <li> <a href="/Documentation/ExchangeIndex/current/About/About">Splunk<sup>®</sup> Add-on for Microsoft Exchange Indexes</a> </li> <li> <a href="/Documentation/SAVMW/1.0.1/User/Overview">Splunk<sup>®</sup> Supporting Add-on for VMware</a> </li> <li> <a href="/Documentation/SANetapp/1.0.1/User/Overview">Splunk<sup>®</sup> Supporting Add-on for NetApp</a> </li> <li> <a href="/Documentation/SA-LdapSearch/3.1.1/User/AbouttheSplunkSupportingAdd-onforActiveDirectory">Splunk<sup>®</sup> Supporting Add-on for Active Directory</a> </li> <li> <a href="/Documentation/ChargebackApp/current/Use/Releasenotes">Splunk<sup>®</sup> App for Chargeback</a> </li> <li> <a href="/Documentation/UpgradejQuery/1/UpgradejQuery/jQueryOverview">jQuery Upgrade Readiness</a> </li> </ul> <div> <a class="more" href="#Apps_and_add-ons">Show more <span class="caret-right"></span></a> </div> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Developer_tools.png?2.1" class="img-category" alt="Developer tools" /> Developer tools </h2> <ul class="list-unstyled items-list" id="Developer_tools"> <li> <a href="/Documentation/AddonBuilder/4.4.1/UserGuide/Overview">Splunk<sup>®</sup> Add-on Builder</a> </li> <li> <a href="/Documentation/SDK">Splunk<sup>®</sup> SDKs</a> </li> <li> <a href="/Documentation/WebFramework">Splunk<sup>®</sup> Web Framework</a> </li> </ul> </div> </div> <div class="row"> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Best_practices.png?2.1" class="img-category" alt="Best practices" /> Best practices </h2> <ul class="list-unstyled items-list" id="Best_practices"> <li> <a target="_blank" href="https://lantern.splunk.com" title="External link to Splunk Lantern">Splunk Lantern</a> </li> <li> <a target="_blank" href="https://community.splunk.com/t5/Splunk-Tech-Talks/bg-p/splunktechtalks" title="External link to Splunk<sup>®</sup> Tech Talks">Splunk<sup>®</sup> Tech Talks</a> </li> <li> <a href="/Documentation/VersionCompatibility/current/Matrix/CompatMatrix">Splunk<sup>®</sup> Products Version Compatibility</a> </li> <li> <a href="/Documentation/SVA/current/Architectures/About">Splunk<sup>®</sup> Validated Architectures</a> </li> </ul> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Community.png?2.1" class="img-category" alt="Community" /> Community </h2> <ul class="list-unstyled items-list" id="Community"> <li> <a href="/Documentation/Community/current/community/AboutCommunity">Get Started with Splunk<sup>®</sup> Community</a> </li> <li> <a href="/Documentation/Splunkbase/splunkbase/Answers/AboutAnswers">Splunk<sup>®</sup> Answers</a> </li> <li> <a href="/Documentation/StyleGuide/current/StyleGuide/Howtouse">Splunk<sup>®</sup> Style Guide</a> </li> </ul> </div> <div class="col-lg-4 col-md-4 col-sm-4 col-xs-12"> <h2> <img src="/skins/OxfordComma/images/icons/v2_category-Core_products.png?2.1" class="img-category" alt="Legacy" /> Legacy </h2> <ul class="list-unstyled items-list" id="Legacy"> <li> <a href="/Documentation/Legacy">Legacy products</a> </li> </ul> </div> </div> <div class="row"> </div> <div class="row"> <div class="col-lg-6 col-md-6 col-xs-12"> <div class="border-home-links"> <div class="home-links-container"> <h2> <img src="/skins/OxfordComma/images/v2_tutorials.png" class="img-category" alt="Best practices"> Search Tutorial </h2> <div class="home-links-text"> <p> If you are new to Splunk software, start here! <a href="/Documentation/SplunkCloud/latest/SearchTutorial/WelcometotheSearchTutorial">The Search Tutorial</a> guides you through adding data, searching, and creating simple dashboards. </p> </div> </div> </div> </div> <div class="col-lg-6 col-md-6 col-xs-12"> <div class="border-home-links"> <div class="home-links-container"> <h2> <img src="/skins/OxfordComma/images/v2_category-Community.png" class="img-category" alt="Community"> Visit Splunk Answers</h2> <div class="home-links-text"> <p> Have questions about how to do something with Splunk software? <a href="https://community.splunk.com/" target="_blank">Engage with the Splunk community</a> to get answers fast! </p> </div> </div> </div> </div> </div> <div class="row"></div> </div> </section> <style type="text/css"> /* GDPR Cookie Banner Starts Here */ .cookie-banner-centered { position:fixed; bottom:0; z-index:9999; } .cookie-banner-centered.hide { display:none; } .cookie-banner-centered .cookie-banner-container { position:relative; padding:20px 30px; background:#e6e8e6; border:1px solid #72777a; border-left:4px solid #2eb50b; border-radius:2px; box-shadow:0 2px 4px 0 rgba(0,0,0,0.5) } .cookie-banner-centered .cookie-banner-container .close-x-cookie-banner { position:absolute; top:8px; right:8px; height:15px; width:15px; opacity:.8; transition:opacity .3s } .cookie-banner-centered .cookie-banner-container .close-x-cookie-banner:hover { opacity:1;cursor:pointer } .cookie-banner-centered .cookie-banner-container .cookie-message { font-size:15px; font-weight:normal; line-height:1.4em; padding-bottom:15px; color:#474444; display:block } .cookie-banner-centered .cookie-banner-container .cookie-message .cookies-link { display:inline; color:#2eb50b; padding:0; margin:0; white-space:normal; text-align:left; font-weight:600; } .cookie-banner-centered .cookie-banner-container .cookies-btn-container { font-size:15px; font-weight:normal; line-height:1.4em; color:#474444; display:block } @media(max-width:768px) { .cookie-banner-centered .cookie-banner-container { margin-right:-10px; margin-left:-10px; margin-bottom:-2px; } } /* GDPR Cookie Banner Ends Here */ </style> <!-- GDPR Cookie Banner Starts Here --> <div class="cookie-banner-centered hide col-xs-12 col-sm-8 col-sm-offset-2"> <div role="dialog" aria-live="polite" aria-label="cookie-banner-container" aria-describedby="cookie-banner-container:desc" class="cookie-banner-container" style=""> <div class="close-x-cookie-banner"}> <img src="/skins/OxfordComma/images/close_icon.svg" alt="close"> </div> <span class="cookie-message"> We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. <a aria-label="got it" role="button" tabindex="0" class="cookies-link splunk-btn sp-btn-green-clear" href="https://www.splunk.com/en_us/legal/splunk-cookie-policy.html" target="_blank">Learn more (including how to update your settings) here » </a> </span> <div class="cookies-btn-container"> Closing this box indicates that you accept our Cookie Policy. </div> </div> </div> <!-- GDPR Cookie Banner Ends Here --> <!-- Footer Starts Here --> <footer> <div class="container"> <div class="row"> <div class="col-xs-12 col-md-3"> <img class='logo-footer' src="/skins/OxfordComma/images/v2_Splunk-logo.svg" alt=""/> </div> <div class="col-xs-12 col-md-5 col-md-offset-4 right-side"> <div id="links"> <ul> <li> <a target="" href="https://twitter.com/splunk"> <img src="/skins/OxfordComma/images/v2_X.svg" alt=""/> </a> </li> <li> <a target="" href="https://www.facebook.com/splunk"> <img src="/skins/OxfordComma/images/v2_face.svg" alt=""/> </a> </li> <li> <a target="" href="https://www.linkedin.com/company/splunk"> <img src="/skins/OxfordComma/images/v2_linkedin.svg" alt=""/> </a> </li> <li> <a href="https://www.youtube.com/user/splunkvideos"> <img src="/skins/OxfordComma/images/v2_youtube.svg" alt=""/> </a> </li> <li> <a href="https://www.instagram.com/splunk/"> <img src="/skins/OxfordComma/images/v2_instagram.svg" alt=""/> </a> </li> </ul> </div> </div> <br> <div id="rights" class="col-xs-12 right-side"> <div> <span>© 2005-2025 Splunk LLC All rights reserved. </span> </div> </div> <br> <div class="col-xs-12 col-md-5 col-md-offset-7 right-side "> <div class="legal-links"> <ul> <li> <a target="" href="https://www.splunk.com/en_us/legal.html"> Legal </a> </li> <li> <a target="" href="https://www.splunk.com/en_us/legal/privacy/privacy-policy.html"> Privacy </a> </li> <li> <a href="https://www.splunk.com/en_us/legal/terms/terms-of-use.html"> Website Term of Use </a> </li> </ul> </div> </div> </div> </div> </footer> <!-- Footer Ends Here --><script>(window.RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgPageParseReport":{"limitreport":{"cputime":"0.019","walltime":"0.025","ppvisitednodes":{"value":30,"limit":1000000},"ppgeneratednodes":{"value":36,"limit":1000000},"postexpandincludesize":{"value":0,"limit":2097152},"templateargumentsize":{"value":0,"limit":2097152},"expansiondepth":{"value":2,"limit":40},"expensivefunctioncount":{"value":0,"limit":100},"unstrip-depth":{"value":0,"limit":20},"unstrip-size":{"value":0,"limit":5000000},"timingprofile":["100.00% 0.000 1 -total"]},"cachereport":{"timestamp":"20250217074113","ttl":86400,"transientcontent":false}}});});</script><script>(window.RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgBackendResponseTime":132});});</script><!--googleon: index--> </body> </html> <!-- FPC%3A%2FDocumentation Cached Page -->