CINXE.COM

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <title>Home - Splunk Lantern</title> <link media="screen" type="text/css" rel="stylesheet" href="https://a.mtstatic.com/@cache/layout/legacy.css?_=ddf747c7eb99247abc7cf2de0f28e936_bGFudGVybi5zcGx1bmsuY29t:site_13743" id="mt-screen-css" /> <link media="print" type="text/css" rel="stylesheet" href="https://a.mtstatic.com/@cache/layout/print.css?_=b5a994b3b27d0ee399bd36e73a4e9f04:site_13743" id="mt-print-css" /> <script type="text/javascript" nonce="d01c491316610baaa75c54a1197cc19d84476b7f3865b44ab23ae3abde36df24" src="https://a.mtstatic.com/deki/javascript/out/grape.min.js?_=68a961c47aca315fc6f2ee546910f439740d650c:site_13743"></script><script type="application/json" id="mt-global-settings" nonce="d01c491316610baaa75c54a1197cc19d84476b7f3865b44ab23ae3abde36df24">{"apiToken":"xhr_2_1743901268_e6aa32586090675ae530dc401004e5f9d10174acb7928a8bbcced71233c26da1","pageId":1,"pageViewId":"513aa3d9-5081-4952-94e5-7cd3107df3ae"}</script>  <script>/*<![CDATA[*/(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-TPV7TP');/*]]>*/</script>  <script type="text/javascript" nonce="d01c491316610baaa75c54a1197cc19d84476b7f3865b44ab23ae3abde36df24">(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)})(window,document,'script','//www.google-analytics.com/analytics.js','ga');ga('create','UA-65721316-34','lantern.splunk.com',{name:'mtTracker',allowLinker:true});ga('mtTracker.require','linker');ga('mtTracker.set', 'anonymizeIp', true);ga('mtTracker.send','pageview');document.addEventListener('mindtouch-web-widget:f1:loaded',function(e){var t=e.data||{},d=t.widget;d&&''!==t.embedId&&document.addEventListener('mindtouch-web-widget:f1:clicked',function(e){var t=(e.data||{}).href;if(t){var n=document.createElement('a');n.setAttribute('href',t),'expert-help.nice.com'===n.hostname&&(e.preventDefault(),ga('linker:decorate',n),d.open(n.href))}})});</script> </head> <body class="columbia-page-home columbia-article-topic-category columbia-breadcrumb-home columbia-live no-touch columbia-lang-en-us columbia-skin-grape"> <div class="grape-messaging"> </div> <div class="grape-header-custom"> <div class="custom-nav-wrapper"><div class="navbar"><div class="logo-container"><div class="navbar-link navbar-logo"><div translate="no"><a href="https://splunk.com" target="_blank" rel="external noopener nofollow" class="link-https"><img src="https://lantern.splunk.com/@api/deki/site/logo.png?default=https://a.mtstatic.com/skins/styles/elm/logo.svg%3F_%3D68a961c47aca315fc6f2ee546910f439740d650c:site_13743" /></a></div></div><div class="navbar-link lantern-home"><a class="internal mt-self-link" href="https://lantern.splunk.com/" rel="internal">Lantern Home</a></div><div class="navbar-link navbar-link-toggle"><span class="hamburger"></span><span class="hamburger"></span><span class="hamburger"></span></div></div><nav class="navbar-items navbar-items-right"><div class="navbar-link mobile-user-wrapper"><img id="splunk-login-icon" class="internal" alt="splunk-login-icon.png" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/4151/splunk-login-icon.png?revision=1" /><a href="https://lantern.splunk.com/@app/auth/2/login?returnto=" rel="nofollow">Login</a></div><div class="navbar-link"><a target="_blank" href="https://docs.splunk.com/" rel="external noopener nofollow" class="link-https">Documentation</a></div><div class="navbar-link"><a target="_blank" href="https://www.splunk.com/en_us/community.html" rel="external noopener nofollow" class="link-https">Community</a></div><div class="navbar-link"><a target="_blank" href="https://www.splunk.com/en_us/training.html" rel="external noopener nofollow" class="link-https">Training & Certification</a></div><div class="navbar-link"><a target="_blank" href="http://login.splunk.com/page/sso_redirect?type=portal" rel="external noopener nofollow" class="external">Support Portal</a></div><div class="navbar-link"><a target="_blank" href="https://usergroups.splunk.com/" rel="external noopener nofollow" class="link-https">User Groups</a></div><div class="navbar-link user-dropdown"><img id="login-icon" class="internal" alt="splunk-login-icon.png" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/4151/splunk-login-icon.png?revision=1" /><div id="dropdown-wrapper"><div class="triangle"></div><ul><a href="https://lantern.splunk.com/@app/auth/2/login?returnto=" rel="nofollow">Login</a></ul></div></div><div class="navbar-link"><a target="_blank" href="https://www.splunk.com/en_us/download/splunk-cloud/cloud-trial.html" rel="external noopener nofollow" class="link-https">Free Splunk</a></div></nav></div></div> <script type="text/javascript">/*<![CDATA[*/ function classToggle() { const navs = document.querySelectorAll('.navbar-items') navs.forEach(function(nav) { nav.classList.toggle('navbar-toggle-show') }) } document.querySelector('.navbar-link-toggle') .addEventListener('click', classToggle);/*]]>*/</script> <script type="text/javascript">/*<![CDATA[*/ var userDropLink = document.querySelector(".navbar-link.user-dropdown"); var userDropName = document.getElementById("user-dropdown-name"); var userDropMenu = document.getElementById("dropdown-wrapper"); var userDropArrow = document.querySelector(".dropdown-arrow"); var userIcon = document.getElementById("login-icon-desk-anon"); console.log(userIcon); function showDropdown() { if(userDropName && userDropArrow) { userDropArrow.style.transform = "rotate(180deg)"; userDropArrow.style.color = "#ed0080"; userDropMenu.style.display = "block"; userDropName.style.background = "#ed0080"; } else { console.log("anon"); userDropMenu.style.display = "block"; userIcon.style.fill = "#ed0080"; } } function hideDropdown() { if(userDropName && userDropArrow) { userDropMenu.style.display = "none"; userDropName.style.background = "#656c76"; userDropArrow.style.transform = "rotate(0deg)"; userDropArrow.style.color = "#656c76"; } else { userDropMenu.style.display = "none"; userIcon.style.fill = "#656c76"; } } userDropLink.addEventListener("mouseenter", showDropdown); userDropLink.addEventListener("mouseleave", hideDropdown);/*]]>*/</script> <script type="text/javascript">/*<![CDATA[*/ (function(){var g=function(e,h,f,g){ this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return d.substring(a.length,d.length)}return null}; this.set=function(a,c){var b="",b=new Date;b.setTime(b.getTime()+6048E5);b="; expires="+b.toGMTString();document.cookie=a+"="+c+b+"; path=/; "}; this.check=function(){var a=this.get(f);if(a)a=a.split(":");else if(100!=e)"v"==h&&(e=Math.random()>=e/100?0:100),a=[h,e,0],this.set(f,a.join(":"));else return!0;var c=a[1];if(100==c)return!0;switch(a[0]){case "v":return!1;case "r":return c=a[2]%Math.floor(100/c),a[2]++,this.set(f,a.join(":")),!c}return!0}; this.go=function(){if(this.check()){var a=document.createElement("script");a.type="text/javascript";a.src=g;document.body&&document.body.appendChild(a)}}; this.start=function(){var t=this;"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",function(){t.go()},!1):window.attachEvent&&window.attachEvent("onload",function(){t.go()}):t.go()};}; try{(new g(100,"r","QSI_S_ZN_1EUShoUYECtmqnc","https://zn1eushouyectmqnc-splunk.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_1EUShoUYECtmqnc")).start()}catch(i){}})(); /*]]>*/</script> <script type="text/javascript">/*<![CDATA[*/ var seated = user.seated;/*]]>*/</script> <script type="text/javascript">/*<![CDATA[*/ (function(){var g=function(e,h,f,g){ this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return d.substring(a.length,d.length)}return null}; this.set=function(a,c){var b="",b=new Date;b.setTime(b.getTime()+6048E5);b="; expires="+b.toGMTString();document.cookie=a+"="+c+b+"; path=/; "}; this.check=function(){var a=this.get(f);if(a)a=a.split(":");else if(100!=e)"v"==h&&(e=Math.random()>=e/100?0:100),a=[h,e,0],this.set(f,a.join(":"));else return!0;var c=a[1];if(100==c)return!0;switch(a[0]){case "v":return!1;case "r":return c=a[2]%Math.floor(100/c),a[2]++,this.set(f,a.join(":")),!c}return!0}; this.go=function(){if(this.check()){var a=document.createElement("script");a.type="text/javascript";a.src=g;document.body&&document.body.appendChild(a)}}; this.start=function(){var t=this;"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",function(){t.go()},!1):window.attachEvent&&window.attachEvent("onload",function(){t.go()}):t.go()};}; try{(new g(100,"r","QSI_S_ZN_6YEBaVzF9jwyuj4","https://zn6yebavzf9jwyuj4-splunk.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_6YEBaVzF9jwyuj4")).start()}catch(i){}})(); /*]]>*/</script> <div id="ZN_6YEBaVzF9jwyuj4"> <p> </p> </div> <script type="text/javascript">/*<![CDATA[*/ (function(){var g=function(e,h,f,g){ this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return d.substring(a.length,d.length)}return null}; this.set=function(a,c){var b="",b=new Date;b.setTime(b.getTime()+6048E5);b="; expires="+b.toGMTString();document.cookie=a+"="+c+b+"; path=/; "}; this.check=function(){var a=this.get(f);if(a)a=a.split(":");else if(100!=e)"v"==h&&(e=Math.random()>=e/100?0:100),a=[h,e,0],this.set(f,a.join(":"));else return!0;var c=a[1];if(100==c)return!0;switch(a[0]){case "v":return!1;case "r":return c=a[2]%Math.floor(100/c),a[2]++,this.set(f,a.join(":")),!c}return!0}; this.go=function(){if(this.check()){var a=document.createElement("script");a.type="text/javascript";a.src=g;document.body&&document.body.appendChild(a)}}; this.start=function(){var t=this;"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",function(){t.go()},!1):window.attachEvent&&window.attachEvent("onload",function(){t.go()}):t.go()};}; try{(new g(100,"r","QSI_S_ZN_aaOQXgG6XwUToDc","https://znaaoqxgg6xwutodc-splunk.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_aaOQXgG6XwUToDc")).start()}catch(i){}})(); /*]]>*/</script></div> <div class="grape-header grape-wrapper"> <div class="grape-header-container grape-wrapper-container"> <div class="grape-site-logo"> <a class="logo-anonymous" href="/" title="Splunk Lantern"> <img class="mt-cdn" src="https://a.mtstatic.com/@public/production/site_13743/1710778214-logo.png" alt="Splunk Lantern" title="Splunk Lantern"> </a> </div> <div class="grape-site-navigation"> <ul class="mt-site-nav"> <li class="mt-login-sign-in"> <a class="mt-icon-quick-sign-in" href="https://lantern.splunk.com/@app/auth/2/login?returnto=https%3A%2F%2Flantern.splunk.com" title="Sign in"> Sign in </a> </li> <li class="mt-login-forgot-password"> <a class="mt-icon-login-forgot-password" href="https://lantern.splunk.com/Special:UserPassword" title="Retrieve lost password"> Forgot password </a> </li> </ul> </div> <div class="grape-site-search"> <div class="mt-quick-search-container"> <form action="/Special:Search"> <input name="path" id="mt-search-path" type="hidden" value="" /> <label class="mt-label" for="mt-site-search-input"> Search </label> <input class="mt-text mt-search search-field" name="q" id="mt-site-search-input" placeholder="How can we help you?" type="search" /> <button class="mt-button ui-button-icon mt-icon-site-search-button search-button" type="submit"> Search </button> </form> </div> </div> </div> <div class="grape-site-nav grape-wrapper-container"> <ul class="mt-breadcrumbs"> </ul> </div> </div> <div class="grape-content grape-wrapper"> <div class="grape-content-container grape-wrapper-container"> <div id="flash-messages"><div class="dekiFlash"></div></div> <div class="mt-content-header"> <p> </p> </div> <div class="mt-content-side"> <script type="text/javascript">/*<![CDATA[*/ const trees = document.querySelectorAll(".wiki-tree > ul"); let currentPage = window.location.href; function listChildren(e) { if (e.children.length === 0) { return; } for (var i = 0; i < e.children.length; i++) { var el = e.children[i]; if (el.children.length > 1 && el.tagName == "LI") { el.className = "mt-icon-arrow-right8 collapsed"; el.addEventListener("click", function (event) { if (this.className == "mt-icon-arrow-right8 collapsed") { this.className = "mt-icon-arrow-down8"; } else { this.className = "mt-icon-arrow-right8 collapsed"; } event.stopPropagation(); }); } else { el.addEventListener("click", function (event) { event.stopPropagation(); }); } if (el.href == currentPage) { el.classList.add("active-page"); //Loop through this page and all parent pages, and remove the collapsed class var pElement = el.parentElement.parentElement; //Skipping direct parent so that currentPage itself remains collapsed for (var j = 0; j < 1000; j++) { pElement.classList.remove("collapsed"); if (pElement.classList.contains("mt-icon-arrow-right8")) { pElement.classList.remove("mt-icon-arrow-right8"); pElement.classList.add("mt-icon-arrow-down8"); } pElement = pElement.parentElement; if (pElement.classList.contains("wiki-tree")) { break; } } } listChildren(e.children[i]); } } for (var i = 0; i < trees.length; i++) { listChildren(trees[i]); }/*]]>*/</script> </div> <div id="mt-toc-container" data-title="Table of contents" data-collapsed="true"> <button class="mt-toggle mt-summary-toggle ui-button-icon mt-toggle-expand">Table of contents</button> <div class="mt-toc-content mt-collapsible-section mt-toc-hide"> <ol><li><a href="#Featured:_Enterprise_Security" rel="internal">Featured: Enterprise Security</a></li><li><a href="#Conducting_an_insider_threat_workshop_in_your_organization" rel="internal">Conducting an insider threat workshop in your organization</a><ol><li><a href="#Featured:_Data" rel="internal">Featured: Data</a></li></ol></li><li><a href="#Selecting_the_best_method_for_Google_data_ingestion" rel="internal">Selecting the best method for Google data ingestion</a><ol><li><a href="#Featured:_Splunk_Platform" rel="internal">Featured: Splunk Platform</a></li></ol></li><li><a href="#Bypassing_a_database_for_faster_processing" rel="internal">Bypassing a database for faster processing</a><ol><li><a href="#Platform" rel="internal">Platform</a></li><li><a href="#Security" rel="internal">Security</a></li><li><a href="#Observability" rel="internal">Observability</a><ol><li><a href="#Resources_for_Splunk_Program_Managers" rel="internal">Resources for Splunk Program Managers</a></li></ol></li><li><a href="#The_Splunk_Success_Framework" rel="internal">The Splunk Success Framework</a><ol><li><a href="#Data_Ingestion_and_Application" rel="internal">Data Ingestion and Application</a></li></ol></li><li><a href="#Data_Descriptors" rel="internal">Data Descriptors</a><ol><li><a href="#Get_the_latest" rel="internal">Get the latest</a></li></ol></li><li><a href="#New_Articles" rel="internal">New Articles</a></li></ol></li></ol> </div> </div> <div id="page-top"> <div id="topic"> <div id="pageText"> <div class="featured-articles-container"><div class="featured-article-wrapper"><div class="featured-article-inner-wrapper"><span id="Featured:_Enterprise_Security"></span><h6 class="featured-article-subtitle">Featured: Enterprise Security</h6><span id="Conducting_an_insider_threat_workshop_in_your_organization"></span><h2 class="featured-article-title">Conducting an insider threat workshop in your organization</h2><p class="featured-article-summary">The self-guided workshop is focused on developing recommended insider threat use cases in Splunk Enterprise Security and how to enhance these use cases with risk-based alerting. The key objective is to help you detect, mitigate, and emulate insider actions on IT systems and stop them.</p></div><div class="gradient-wrapper"><a class="featured-article-learn-more" href="https://lantern.splunk.com/Security/Product_Tips/Enterprise_Security/Conducting_an_insider_threat_workshop_in_your_organization" rel="internal">Learn More</a><div class="gradient-border"></div></div></div><div class="featured-article-wrapper"><div class="featured-article-inner-wrapper"><span id="Featured:_Data"></span><h6 class="featured-article-subtitle">Featured: Data</h6><span id="Selecting_the_best_method_for_Google_data_ingestion"></span><h2 class="featured-article-title">Selecting the best method for Google data ingestion</h2><p class="featured-article-summary">As a cloud service provider, Google offers variety of utilities and services. Typically, organizations want to analyze logs, metrics, traces, or a combination of those items from these services. This article explains different ways to collect this data using Splunk software.</p></div><div class="gradient-wrapper"><a class="featured-article-learn-more" href="https://lantern.splunk.com/Data_Descriptors/Google/Selecting_the_best_method_for_Google_data_ingestion" rel="internal">Learn More</a><div class="gradient-border"></div></div></div><div class="featured-article-wrapper"><div class="featured-article-inner-wrapper"><span id="Featured:_Splunk_Platform"></span><h6 class="featured-article-subtitle">Featured: Splunk Platform</h6><span id="Bypassing_a_database_for_faster_processing"></span><h2 class="featured-article-title">Bypassing a database for faster processing</h2><p class="featured-article-summary">Many admins have their Splunk environment configured in a way that requires a lengthy, multistep process to get time series data into a relational database, and then available for search and reporting. This brief article offers a simplified method.</p></div><div class="gradient-wrapper"><a class="featured-article-learn-more" href="https://lantern.splunk.com/Splunk_Platform/Product_Tips/Administration/Bypassing_a_database_for_faster_processing" rel="internal">Learn More</a><div class="gradient-border"></div></div></div></div> <div class="custom-category-container"><div class="custom-category-wrapper"><img class="custom-category-thumbnail internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/744/mindtouch.page%2523thumbnail?revision=1" /><span id="Platform"></span><h3 class="custom-category-title"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform" rel="internal">Platform</a></h3><ul class="custom-category-subpage-list"><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform/Getting_Started" rel="internal">Getting Started</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform/Product_Tips" rel="internal">Product Tips</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform/UCE" rel="internal">Use Case Explorer for the Splunk Platform</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform/Splunk_Outcome_Paths" rel="internal">Splunk Outcome Paths</a></li></ul><select class="custom-category-dropdown" onchange="window.location.href=this.value;"><option selected="true" disabled="disabled">Select a Use Case</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Energy">Energy</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Financial_Services_and_Insurance">Financial Services and Insurance</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Healthcare">Healthcare</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Manufacturing">Manufacturing</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Observability">Use Cases for Observability with the Splunk Platform</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Public_Sector">Public Sector</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Retail">Retail</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Security">Use Cases for Security with the Splunk Platform</option><option class="use-case-option" value="https://lantern.splunk.com/Splunk_Platform/UCE/Technology%2C_Communications%2C_and_Media">Technology, Communications, and Media</option></select></div><div class="custom-category-wrapper"><img class="custom-category-thumbnail internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/745/mindtouch.page%2523thumbnail?revision=1" /><span id="Security"></span><h3 class="custom-category-title"><a class="internal" href="https://lantern.splunk.com/Security" rel="internal">Security</a></h3><ul class="custom-category-subpage-list"><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Security/Getting_Started" rel="internal">Getting Started</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Security/Product_Tips" rel="internal">Product Tips</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Security/UCE" rel="internal">Use Case Explorer for Security</a></li></ul><select class="custom-category-dropdown" onchange="window.location.href=this.value;"><option selected="true" disabled="disabled">Select a Use Case</option><option class="use-case-option" value="https://lantern.splunk.com/Security/UCE/Foundational_Visibility">Foundational Visibility</option><option class="use-case-option" value="https://lantern.splunk.com/Security/UCE/Guided_Insights">Guided Insights</option><option class="use-case-option" value="https://lantern.splunk.com/Security/UCE/Proactive_Response">Proactive Response</option><option class="use-case-option" value="https://lantern.splunk.com/Security/UCE/Unified_Workflows">Unified Workflows</option></select></div><div class="custom-category-wrapper"><img class="custom-category-thumbnail internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/746/mindtouch.page%2523thumbnail?revision=2" /><span id="Observability"></span><h3 class="custom-category-title"><a class="internal" href="https://lantern.splunk.com/Observability" rel="internal">Observability</a></h3><ul class="custom-category-subpage-list"><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/Getting_Started" rel="internal">Getting Started</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/Product_Tips" rel="internal">Product Tips</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE" rel="internal">Use Case Explorer for Observability</a></li></ul><select class="custom-category-dropdown" onchange="window.location.href=this.value;"><option selected="true" disabled="disabled">Select a Use Case</option><option class="use-case-option" value="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility">Foundational Visibility</option><option class="use-case-option" value="https://lantern.splunk.com/Observability/UCE/Guided_Insights">Guided Insights</option><option class="use-case-option" value="https://lantern.splunk.com/Observability/UCE/Proactive_response">Proactive Response</option><option class="use-case-option" value="https://lantern.splunk.com/Observability/UCE/Unified_Workflows">Unified Workflows</option></select></div></div> <div class="promo-banner-container"><div class="promo-banner-wrapper"><div class="promo-text-container"><img class="internal" alt="Industries.png" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/4966/Industries.png?revision=1" /><p>Accelerate your industry with ready-to-deploy Solution Accelerators from Splunk. Tailored for sectors like manufacturing and finance,<br />our analytics-driven solutions help you monitor, optimize, and secure operations for faster, smarter decision-making.</p></div><div class="promo-link-container"><a class="internal" href="https://lantern.splunk.com/@go/page/8344" rel="nofollow">Click to begin</a></div></div></div> <p> </p> <div class="new-articles-container"><div class="new-articles-container-inner"><div class="success-framework-wrapper"><span id="Resources_for_Splunk_Program_Managers"></span><h6 class="success-framework-subtitle">Resources for Splunk Program Managers</h6><span id="The_Splunk_Success_Framework"></span><h3 class="success-framework-title"><a href="https://lantern.splunk.com/Splunk_Success_Framework" rel="internal">The Splunk Success Framework</a></h3><p class="success-framework-summary">Accelerate and increase the value you derive from your data with Splunk software using the Splunk Success Framework (SSF), a flexible collection of best practices for setting up Splunk Enterprise or Splunk Cloud Platform as a program.</p></div><div class="data-wrapper"><span id="Data_Ingestion_and_Application"></span><h6 class="data-subtitle">Data Ingestion and Application</h6><span id="Data_Descriptors"></span><h3 class="data-title"><a href="https://lantern.splunk.com/Data_Descriptors" rel="internal">Data Descriptors</a></h3><p class="data-summary">Bring data to every question, decision, and action across your organization with comprehensive guidance for getting data in and applying data to your key use cases.</p></div><div class="new-articles-wrapper"><span id="Get_the_latest"></span><h6 class="success-framework-subtitle">Get the latest</h6><span id="New_Articles"></span><h3 class="success-framework-title">New Articles</h3><ul id="recentlyAdded" class="new-articles-list"><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility/Optimize_Cloud/Monitoring_MariaDB_and_MySQL_with_Observability_Cloud" rel="internal">Monitoring MariaDB and MySQL with Observability Cloud</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility/Optimize_Cloud/Monitoring_Postgres_with_OpenTelemetry" rel="internal">Monitoring Postgres with OpenTelemetry</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility/Optimize_Cloud/Monitoring_Amazon_Elastic_Kubernetes_Services_(EKS)_with_Splunk_Observability_Cloud" rel="internal">Monitoring Amazon Elastic Kubernetes Services (EKS) with Splunk Observability Cloud</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility/Optimize_Cloud/Manage_observability_configurations_as_code_with_the_Splunk_Observability_Cloud_Terraform_provider" rel="internal">Manage observability configurations as code with the Splunk Observability Cloud Terraform provider</a></li><li class="mt-icon-arrow-right9"><a class="internal" href="https://lantern.splunk.com/Observability/UCE/Foundational_Visibility/Optimize_Cloud/Integrating_Google_Kubernetes_Engine_with_Splunk_Observability_Cloud" rel="internal">Integrating Google Kubernetes Engine with Splunk Observability Cloud</a></li></ul></div></div></div> <div class="mt-help-search mt-lsf-search" id="mt-portfolio-search"><script type="application/json" id="mt-localizations-help-widget">/*<![CDATA[*/{"Help.Widget.button.text":"Search","Help.Widget.label.text":"Query","Help.Widget.placeholder.text":"Search Home"}/*]]>*/</script><div class="mt-inputredirect" data-query-key="q" data-path=""></div></div> <div class="mt-page-summary"><div class="mt-page-overview"></div></div> <div class="mt-category-container mt-subpage-listings-container noindex"><ul class="mt-sortable-listings-container " id="mt-sortable" data-user-can-edit="false" data-page-id="1"><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="3284"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform" rel="internal"><span class="mt-icon-article-topic-category"></span>Platform</a></dt><dd class="mt-listing-detailed-image"><a class="internal" href="https://lantern.splunk.com/Splunk_Platform" rel="internal"><span class="mt-sortable-listing-image"><img class="internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/744/mindtouch.page%2523thumbnail?revision=1" /></span></a></dd><dd class="mt-listing-detailed-overview">Turn data into doing to unlock innovation, enhance security and drive resilience.</dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"><li class="mt-show-more-listing"><a title="Getting Started" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Splunk_Platform/Getting_Started" rel="internal"><span class="mt-icon-article-topic-guide"></span>Getting Started</a></li><li class="mt-show-more-listing"><a title="Product Tips" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Splunk_Platform/Product_Tips" rel="internal"><span class="mt-icon-article-topic-category"></span>Product Tips</a></li><li class="mt-show-more-listing"><a title="Use Case Explorer for the Splunk Platform" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Splunk_Platform/UCE" rel="internal"><span class="mt-icon-article-topic-category"></span>Use Case Explorer for the Splunk Platform</a></li><li class="mt-show-more-listing"><a title="Splunk Outcome Paths" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Splunk_Platform/Splunk_Outcome_Paths" rel="internal"><span class="mt-icon-article-topic-category"></span>Splunk Outcome Paths</a></li></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="3286"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Security" rel="internal"><span class="mt-icon-article-topic-category"></span>Security</a></dt><dd class="mt-listing-detailed-image"><a class="internal" href="https://lantern.splunk.com/Security" rel="internal"><span class="mt-sortable-listing-image"><img class="internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/745/mindtouch.page%2523thumbnail?revision=1" /></span></a></dd><dd class="mt-listing-detailed-overview">Protect your business and modernize your security operations with a best-in-class data platform.</dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"><li class="mt-show-more-listing"><a title="Getting Started" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Security/Getting_Started" rel="internal"><span class="mt-icon-article-topic-guide"></span>Getting Started</a></li><li class="mt-show-more-listing"><a title="Product Tips" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Security/Product_Tips" rel="internal"><span class="mt-icon-article-topic-category"></span>Product Tips</a></li><li class="mt-show-more-listing"><a title="Use Case Explorer for Security" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Security/UCE" rel="internal"><span class="mt-icon-article-topic-category"></span>Use Case Explorer for Security</a></li></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="3287"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Observability" rel="internal"><span class="mt-icon-article-topic-category"></span>Observability</a></dt><dd class="mt-listing-detailed-image"><a class="internal" href="https://lantern.splunk.com/Observability" rel="internal"><span class="mt-sortable-listing-image"><img class="internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/746/mindtouch.page%2523thumbnail?revision=2" /></span></a></dd><dd class="mt-listing-detailed-overview">Solve problems in seconds with the only full-stack, analytics-powered, and OpenTelemetry-native observability solution.</dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"><li class="mt-show-more-listing"><a title="Getting Started" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Observability/Getting_Started" rel="internal"><span class="mt-icon-article-topic-guide"></span>Getting Started</a></li><li class="mt-show-more-listing"><a title="Product Tips" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Observability/Product_Tips" rel="internal"><span class="mt-icon-article-topic-category"></span>Product Tips</a></li><li class="mt-show-more-listing"><a title="Use Case Explorer for Observability" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Observability/UCE" rel="internal"><span class="mt-icon-article-topic-category"></span>Use Case Explorer for Observability</a></li></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="619"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Splunk_Success_Framework" rel="internal"><span class="mt-icon-article-topic-guide"></span>Splunk Success Framework</a></dt><dd class="mt-listing-detailed-image mt-hide-image"><a class="internal" href="https://lantern.splunk.com/Splunk_Success_Framework" rel="internal"><span class="mt-sortable-listing-image mt-image-placeholder"><span>No image available</span></span></a></dd><dd class="mt-listing-detailed-overview">The Splunk Success Framework (SSF) is a flexible collection of best practices for setting up your Splunk software implementation as a program.</dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="3160"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/About" rel="internal"><span class="mt-icon-article-topic-guide"></span>How Splunk Lantern Can Help</a></dt><dd class="mt-listing-detailed-image mt-hide-image"><a class="internal" href="https://lantern.splunk.com/About" rel="internal"><span class="mt-sortable-listing-image mt-image-placeholder"><span>No image available</span></span></a></dd><dd class="mt-listing-detailed-overview"></dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="823"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Data_Descriptors" rel="internal"><span class="mt-icon-article-topic-guide"></span>Data Descriptors</a></dt><dd class="mt-listing-detailed-image"><a class="internal" href="https://lantern.splunk.com/Data_Descriptors" rel="internal"><span class="mt-sortable-listing-image"><img class="internal" alt="mindtouch.page#thumbnail" loading="lazy" src="https://lantern.splunk.com/@api/deki/files/682/mindtouch.page%2523thumbnail?revision=1" /></span></a></dd><dd class="mt-listing-detailed-overview">The data sources in use at your organization can all be linked to common use cases. Get recommendations from Splunk experts and then start getting answers from your data.</dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"><li class="mt-show-more-listing"><a title="Antivirus and antimalware data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Antivirus_and_antimalware_data" rel="internal"><span class="mt-icon-article-topic"></span>Antivirus and antimalware data</a></li><li class="mt-show-more-listing"><a title="Application data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Application_data" rel="internal"><span class="mt-icon-article-topic"></span>Application data</a></li><li class="mt-show-more-listing"><a title="Application server data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Application_server_data" rel="internal"><span class="mt-icon-article-topic"></span>Application server data</a></li><li class="mt-show-more-listing"><a title="Authentication data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Authentication_data" rel="internal"><span class="mt-icon-article-topic"></span>Authentication data</a></li><li class="mt-show-more-listing"><a title="Backup data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Backup_data" rel="internal"><span class="mt-icon-article-topic"></span>Backup data</a></li><li class="mt-show-more-listing"><a title="Vendor-specific data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Vendor-specific_data" rel="internal"><span class="mt-icon-article-topic"></span>Vendor-specific data</a></li><li class="mt-show-more-listing"><a title="Endpoint detection and response (EDR) data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Endpoint_detection_and_response_(EDR)_data" rel="internal"><span class="mt-icon-article-topic"></span>Endpoint detection and response (EDR) data</a></li><li class="mt-show-more-listing"><a title="Intrusion detection and prevention data (IDS and IPS)" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Intrusion_detection_and_prevention_data_(IDS_and_IPS)" rel="internal"><span class="mt-icon-article-topic"></span>Intrusion detection and prevention data (IDS and IPS)</a></li><li class="mt-show-more-listing"><a title="Load balancer data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Load_balancer_data" rel="internal"><span class="mt-icon-article-topic"></span>Load balancer data</a></li><li class="mt-show-more-listing"><a title="Email data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Email_data" rel="internal"><span class="mt-icon-article-topic"></span>Email data</a></li><li class="mt-show-more-listing"><a title="Network communication data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Network_communication_data" rel="internal"><span class="mt-icon-article-topic"></span>Network communication data</a></li><li class="mt-show-more-listing"><a title="Patch management data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Patch_management_data" rel="internal"><span class="mt-icon-article-topic"></span>Patch management data</a></li><li class="mt-show-more-listing"><a title="Physical security data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Physical_security_data" rel="internal"><span class="mt-icon-article-topic"></span>Physical security data</a></li><li class="mt-show-more-listing"><a title="Web proxy data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Web_proxy_data" rel="internal"><span class="mt-icon-article-topic"></span>Web proxy data</a></li><li class="mt-show-more-listing"><a title="Change events data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Change_events_data" rel="internal"><span class="mt-icon-article-topic"></span>Change events data</a></li><li class="mt-show-more-listing"><a title="Configuration management data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Configuration_management_data" rel="internal"><span class="mt-icon-article-topic"></span>Configuration management data</a></li><li class="mt-show-more-listing"><a title="IP address assignment data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/IP_address_assignment_data" rel="internal"><span class="mt-icon-article-topic"></span>IP address assignment data</a></li><li class="mt-show-more-listing"><a title="Vulnerability detection data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Vulnerability_detection_data" rel="internal"><span class="mt-icon-article-topic"></span>Vulnerability detection data</a></li><li class="mt-show-more-listing"><a title="Web server data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Web_server_data" rel="internal"><span class="mt-icon-article-topic"></span>Web server data</a></li><li class="mt-show-more-listing"><a title="DNS data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/DNS_data" rel="internal"><span class="mt-icon-article-topic"></span>DNS data</a></li><li class="mt-show-more-listing"><a title="Linux and Unix" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Linux_and_Unix" rel="internal"><span class="mt-icon-article-topic"></span>Linux and Unix</a></li><li class="mt-show-more-listing"><a title="Okta" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Okta" rel="internal"><span class="mt-icon-article-topic"></span>Okta</a></li><li class="mt-show-more-listing"><a title="SAP" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/SAP" rel="internal"><span class="mt-icon-article-topic"></span>SAP</a></li><li class="mt-show-more-listing"><a title="Zscaler" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Zscaler" rel="internal"><span class="mt-icon-article-topic"></span>Zscaler</a></li><li class="mt-show-more-listing"><a title="Zoom" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Zoom" rel="internal"><span class="mt-icon-article-topic"></span>Zoom</a></li><li class="mt-show-more-listing"><a title="Zeek" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Zeek" rel="internal"><span class="mt-icon-article-topic"></span>Zeek</a></li><li class="mt-show-more-listing"><a title="Websense" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Websense" rel="internal"><span class="mt-icon-article-topic"></span>Websense</a></li><li class="mt-show-more-listing"><a title="VMware" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/VMware" rel="internal"><span class="mt-icon-article-topic"></span>VMware</a></li><li class="mt-show-more-listing"><a title="CrowdStrike" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/CrowdStrike" rel="internal"><span class="mt-icon-article-topic"></span>CrowdStrike</a></li><li class="mt-show-more-listing"><a title="Carbon Black" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Carbon_Black" rel="internal"><span class="mt-icon-article-topic"></span>Carbon Black</a></li><li class="mt-show-more-listing"><a title="Kubernetes" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Kubernetes" rel="internal"><span class="mt-icon-article-topic"></span>Kubernetes</a></li><li class="mt-show-more-listing"><a title="Check Point" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Check_Point" rel="internal"><span class="mt-icon-article-topic"></span>Check Point</a></li><li class="mt-show-more-listing"><a title="Fortinet" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Fortinet" rel="internal"><span class="mt-icon-article-topic"></span>Fortinet</a></li><li class="mt-show-more-listing"><a title="Salesforce" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Salesforce" rel="internal"><span class="mt-icon-article-topic"></span>Salesforce</a></li><li class="mt-show-more-listing"><a title="Symantec" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Symantec" rel="internal"><span class="mt-icon-article-topic"></span>Symantec</a></li><li class="mt-show-more-listing"><a title="Palo Alto Networks" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Palo_Alto_Networks" rel="internal"><span class="mt-icon-article-topic"></span>Palo Alto Networks</a></li><li class="mt-show-more-listing"><a title="Trend Micro" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Trend_Micro" rel="internal"><span class="mt-icon-article-topic"></span>Trend Micro</a></li><li class="mt-show-more-listing"><a title="Tenable" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Tenable" rel="internal"><span class="mt-icon-article-topic"></span>Tenable</a></li><li class="mt-show-more-listing"><a title="GitHub" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/GitHub" rel="internal"><span class="mt-icon-article-topic"></span>GitHub</a></li><li class="mt-show-more-listing"><a title="Atlassian" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Atlassian" rel="internal"><span class="mt-icon-article-topic"></span>Atlassian</a></li><li class="mt-show-more-listing"><a title="AppDynamics" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/AppDynamics" rel="internal"><span class="mt-icon-article-topic"></span>AppDynamics</a></li><li class="mt-show-more-listing"><a title="Dell" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Dell" rel="internal"><span class="mt-icon-article-topic"></span>Dell</a></li><li class="mt-show-more-listing"><a title="Syslog" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Syslog" rel="internal"><span class="mt-icon-article-topic"></span>Syslog</a></li><li class="mt-show-more-listing"><a title="Apache" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Apache" rel="internal"><span class="mt-icon-article-topic"></span>Apache</a></li><li class="mt-show-more-listing"><a title="Amazon" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Amazon" rel="internal"><span class="mt-icon-article-topic"></span>Amazon</a></li><li class="mt-show-more-listing"><a title="Cisco" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Cisco" rel="internal"><span class="mt-icon-article-topic"></span>Cisco</a></li><li class="mt-show-more-listing"><a title="Microsoft" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Microsoft" rel="internal"><span class="mt-icon-article-topic"></span>Microsoft</a></li><li class="mt-show-more-listing"><a title="Google" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Google" rel="internal"><span class="mt-icon-article-topic"></span>Google</a></li><li class="mt-show-more-listing"><a title="JupiterOne" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/JupiterOne" rel="internal"><span class="mt-icon-article-topic"></span>JupiterOne</a></li><li class="mt-show-more-listing"><a title="GitLab" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/GitLab" rel="internal"><span class="mt-icon-article-topic"></span>GitLab</a></li><li class="mt-show-more-listing"><a title="Mac OS" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Mac_OS" rel="internal"><span class="mt-icon-article-topic"></span>Mac OS</a></li><li class="mt-show-more-listing"><a title="Docker" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Docker" rel="internal"><span class="mt-icon-article-topic"></span>Docker</a></li><li class="mt-show-more-listing"><a title="Firewall data" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Firewall_data" rel="internal"><span class="mt-icon-article-topic"></span>Firewall data</a></li><li class="mt-show-more-listing"><a title="MOVEit" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/MOVEit" rel="internal"><span class="mt-icon-article-topic"></span>MOVEit</a></li><li class="mt-show-more-listing"><a title="Skyhigh Security" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Skyhigh_Security" rel="internal"><span class="mt-icon-article-topic"></span>Skyhigh Security</a></li><li class="mt-show-more-listing"><a title="CyberArk" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/CyberArk" rel="internal"><span class="mt-icon-article-topic"></span>CyberArk</a></li><li class="mt-show-more-listing"><a title="OpenAI" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/OpenAI" rel="internal"><span class="mt-icon-article-topic"></span>OpenAI</a></li><li class="mt-show-more-listing"><a title="Adobe" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Adobe" rel="internal"><span class="mt-icon-article-topic"></span>Adobe</a></li><li class="mt-show-more-listing"><a title="NETSCOUT" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/NETSCOUT" rel="internal"><span class="mt-icon-article-topic"></span>NETSCOUT</a></li><li class="mt-show-more-listing"><a title="Nagios" class="mt-listing-detailed-subpage-title internal" href="https://lantern.splunk.com/Data_Descriptors/Nagios" rel="internal"><span class="mt-icon-article-topic"></span>Nagios</a></li></ul></dd></dl></li><li class="mt-sortable-listing mt-sortable-listing-detailed " data-page-id="8033"><dl class="mt-listing-detailed mt-edit-section"><dt class="mt-listing-detailed-title"><a class="internal" href="https://lantern.splunk.com/Search" rel="internal"><span class="mt-icon-article-topic-category"></span>Search</a></dt><dd class="mt-listing-detailed-image mt-hide-image"><a class="internal" href="https://lantern.splunk.com/Search" rel="internal"><span class="mt-sortable-listing-image mt-image-placeholder"><span>No image available</span></span></a></dd><dd class="mt-listing-detailed-overview"></dd><dd class="mt-listing-detailed-subpages"><ul class="mt-listings-simple mt-listing-article-list mt-topic-hierarchy-listings mt-guide-listings"></ul></dd></dl></li></ul><script type="application/json" id="mt-localizations-ordered-subpages">/*<![CDATA[*/{"MindTouch.IDF3.label.drag-n-drop":"Drag","MindTouch.IDF3.label.reveal.showAll":"Show all","MindTouch.IDF3.label.reveal.showLess":"Show less","MindTouch.IDF3.warning.page-order-limit-exceeded":"Sorry, there are too many child pages to safely reorder. The greatest number of children you can reorder on a page is {0}."}/*]]>*/</script></div> <p> </p> </div> </div> </div> <div class="mt-content-footer"> <p> </p> </div> </div> </div> <div class="grape-footer grape-wrapper"> <div class="grape-wrapper-container"> <ol> <li class="grape-footer-copyright">© Copyright 2025 Splunk Lantern</li> <li class="grape-footer-powered-by"><a href="https://mindtouch.com/demo" class="mt-poweredby product " title="MindTouch" target="_blank"> Powered by CXone Expert <span class="mt-registered">®</span> </a></li> </ol> </div> </div> <div class="grape-footer-custom"> <div class="content-seperator-top"><p></p></div><div class="footer-wrapper"><footer><div class="footer-content-wrapper"><div class="footer-content-column"><div class="base-content"><div class="logo-container"><img src="/@api/deki/files/4014/Cisco-Splunk-Small-Transparent.png?origin=mt-web</div>" alt="" /></div><div class="social-icon-container"><ul class="social-icon-list"><li class="social-icon-list-item"><a target="_blank" href="https://twitter.com/splunk" rel="external noopener nofollow" class="mt-icon-twitter4 link-https"></a></li><li class="social-icon-list-item"><a target="_blank" href="https://www.facebook.com/splunk" rel="external noopener nofollow" class="mt-icon-facebook6 link-https"></a></li><li class="social-icon-list-item"><a target="_blank" href="https://www.linkedin.com/company/splunk" rel="external noopener nofollow" class="mt-icon-linkedin2 link-https"></a></li><li class="social-icon-list-item"><a target="_blank" href="https://www.youtube.com/user/splunkvideos" rel="external noopener nofollow" class="mt-icon-youtube link-https"></a></li><li class="social-icon-list-item"><a target="_blank" href="https://www.instagram.com/splunk/" rel="external noopener nofollow" class="mt-icon-instagram3 link-https"></a></li></ul></div></div><div class="copyright-content"><p>© 2005-2025 Splunk LLC All rights reserved.</p></div><div class="sitemap-content"><div class="sitemap-item"><a target="_blank" href="https://www.splunk.com/en_us/legal.html" rel="external noopener nofollow" class="link-https">Legal</a></div><div class="sitemap-item"><a target="_blank" href="https://www.splunk.com/en_us/legal/patents.html" rel="external noopener nofollow" class="link-https">Patents</a></div><div class="sitemap-item"><a target="_blank" href="https://www.splunk.com/en_us/legal/privacy/privacy-policy.html" rel="external noopener nofollow" class="link-https">Privacy</a></div><div class="sitemap-item"><a target="_blank" href="https://www.splunk.com/en_us/site-map.html" rel="external noopener nofollow" class="link-https">Sitemap</a></div><div class="sitemap-item"><a target="_blank" href="https://www.splunk.com/en_us/legal/terms/terms-of-use.html" rel="external noopener nofollow" class="link-https">Website Terms of Use</a></div></div></div></div></footer></div> <script type="text/javascript">/*<![CDATA[*/ const articleTitleContainer = document.querySelector(".elm-content-container header"); const articleTextContainer = document.querySelector("section.mt-content-container"); const sideNav = document.querySelector("aside.mt-content-side"); const burger = document.getElementById("side-nav-toggle-container"); function toggleSideNav() { articleTitleContainer.classList.toggle("side-nav-open"); articleTextContainer.classList.toggle("side-nav-open"); sideNav.classList.toggle("side-nav-open"); burger.classList.toggle("close"); } burger.addEventListener("click", toggleSideNav);/*]]>*/</script> <ol id="custom-classification-list" class="elm-meta-data elm-meta-bottom"></ol> <script type="text/javascript">/*<![CDATA[*/ document.addEventListener("DOMContentLoaded", function(event) { var pageTitle = document.getElementById("title"); var classifications = document.querySelector(".elm-classifications"); var listContainer = document.getElementById("custom-classification-list"); if (classifications) { var clone = classifications.cloneNode(true); listContainer.appendChild(clone); insertAfter(listContainer, pageTitle); var classificationsTop = document.querySelector("#custom-classification-list .elm-classifications"); var yesArr = classificationsTop.children; var check = checkClass(yesArr); console.log(check); if (check === 0) { listContainer.style.display = "none"; } else { listContainer.style.display = "block"; } } }); function insertAfter(newNode, existingNode) { existingNode.parentNode.insertBefore(newNode, existingNode.nextSibling); } function checkClass(arr) { var number = 0; for (var i =0; i < arr.length; i++) { var names = arr[i].classList; if (names[1].includes("mt-classification-technical-app-") || names[1].includes("mt-classification-technical-addon-") || names[1].includes("mt-classification-applied-product-")) { number++; } } return number; }/*]]>*/</script> </div> <script type="text/javascript" data-mindtouch-module="true" src="https://a.mtstatic.com/deki/javascript/out/standalone/ui.widget.helpWidget.js?_=68a961c47aca315fc6f2ee546910f439740d650c:site_13743"></script><script>/*<![CDATA[*/ dataLayer.push({"Pro_Member":seated}) /*]]>*/</script> <script>/*<![CDATA[*/ dataLayer.push({event:"Demandbase_Loaded"}); /*]]>*/</script> <script>/*<![CDATA[*/ /* * Hide default searchbar. * Show search bar only in default search page */ if (window.location?.pathname !== "/Special:Search") { const searchbarContainer = document.getElementsByClassName("elm-global-search"); if (searchbarContainer && searchbarContainer[0]) { searchbarContainer[0].replaceChildren(); } } /* * Set header background color to transparent * when user is in search page * In search page there is no search bar, then we can hide this header */ if (window.location?.pathname === "/Search") { const header = document.getElementsByClassName("elm-header-user-nav elm-nav"); if (header && header[0]) { header[0].style.backgroundColor = "transparent"; } } /*]]>*/</script> <script>/*<![CDATA[*/ /* * Render IT search bar component * Render in al locations different than new Search page */ if (window.location?.pathname !== "/Search") { const customThemeDefault = ` #sui-id-search-box-input-wrapper input { max-width: 100%; } `; const getSearchBarConfig = () => { return { env: "prod", language: "en", showSearchButton: false, searchBarRedirectUrl: "/Search", }; }; function renderSplunkSearchBarComponent() { const container = document.getElementById("ui-search-bar-container"); const headerContainer = document.getElementsByClassName("elm-global-search"); if (container) { const cc = document.createElement("wplt-search-bar-web-component"); cc.config = { ...getSearchBarConfig(), customTheme: customThemeDefault }; container.replaceChildren(cc); } if (headerContainer && headerContainer[0]) { const cc = document.createElement("wplt-search-bar-web-component"); cc.config = getSearchBarConfig(); headerContainer[0].replaceChildren(cc); } } } else { function renderSplunkSearchBarComponent() {} } /*]]>*/</script> <script defer="defer" onload="renderSplunkSearchBarComponent()" src="https://d38eume8qu1hmc.cloudfront.net/1.1.71/searchBar.js" type="text/javascript"></script> <script>/*<![CDATA[*/ /* * Render ITs Search component * Render only in search page */ if (window.location?.pathname === "/Search") { const getSearchConfig = () => { return { env: "prod", shouldClearFiltersOnNewSearch: false, language: "en", sideContentItems: "source_name_s,article_content_area_s,datePicker", analyticsConfig: { applicationName: "lantern", }, areas: [ "main", "docs", "blogs", "dev", "docs_observability", "community", "lantern", "support_kb_articles", "conf", "others", "splunk_base" ], disclaimerSettings: { disableDisclaimer: true, }, initialFilters: [ { name: "source_name_s", value: ["Lantern"], type: "any", }, ], }; }; function renderSplunkSearchComponent() { const container = document.getElementById("ui-search-container"); if (container) { const cc = document.createElement("wplt-search-web-component"); cc.config = getSearchConfig(); container.replaceChildren(cc); } } } else { function renderSplunkSearchComponent() {} } /*]]>*/</script> <script defer="defer" onload="renderSplunkSearchComponent()" src="https://d38eume8qu1hmc.cloudfront.net/1.1.71/search.js" type="text/javascript"></script> <style>/*<![CDATA[*/ .elm-global-search { width: 50%; } /*]]>*/</style> </body> </html>