Splunk® Analysis Workspace

Using the Splunk Analysis Workspace

Download manual as PDF

This version of the Splunk Analysis Workspace is in beta and not officially supported.
Download topic as PDF

About the Splunk Analysis Workspace

The Analysis Workspace provides a user interface that enables you to monitor and analyze metrics and other time series without using SPL. Select data sources to create interactive charts in the workspace. Then, apply filters and aggregations to gain insight into your system’s metrics and performance. The Analysis Workspace helps you to quickly identify and respond to any issues or anomalies in your data.

Analysis Workspace functions and operations

The Analysis Workspace comes with a set of analytic functions and operations to help you make sense of your data. These functions generate SPL in the background.

Depending on your data source, the following operations are available:

  • Aggregations summarize data points into meaningful values.
  • Time comparisons overlay a previous time period on the chart.
  • Split by shows results for a specific dimension.
  • Filters include or exclude certain results.

After refining your data, use the Analysis Workspace to perform the following actions in Splunk:

  • Set up an alert to be notified of certain behavior in your data.
  • Create a dashboard to monitor or share your findings.

The following video provides an overview of the Splunk Analysis Workspace.

To learn about visualizing data, see Types of data in the Analysis Workspace.
To learn about the different parts of the workspace, see Navigate the Analysis Workspace.
To learn more about analytic functions and operations, see Analytics in the Analysis Workspace.
To learn more about alerts, see Alerts in the Analysis Workspace.
To learn more about dashboards, see Dashboards in the Analysis Workspace.
In order to use the Analysis Workspace, you need permissions. For more information, see Hardware and software requirements for the Splunk Analysis Workspace.


Discuss the Analysis Workspace on Splunk Answers at http://answers.splunk.com.

For questions and support using the Analysis Workspace, contact analysis_workspace_beta@splunk.com.

For general Splunk platform support, see the Splunk Support Programs page.

Install the Splunk Analysis Workspace

This documentation applies to the following versions of Splunk® Analysis Workspace: beta

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters