About the Splunk Center of Excellence
The Splunk Center of Excellence (CoE) is a program of best practices to help you accelerate and increase the value you derive from Splunk.
The CoE provides reference materials, templates, and expert guidance for every aspect of your Splunk implementation, from data onboarding and platform management, to standards for user education, and everything in between.
The CoE comprises Foundations, activities, and Service Areas.
The CoE Foundations provide stability and assurance, like the foundation of a home. Foundations ensure that your Splunk implementation can endure stress and remain healthy in the future. Foundations include charter, executive sponsor, metrics, and operating model. You establish the four Foundations during the initial CoE implementation, although you can always return to Foundations at any time to make changes.
Activities are specific things to do that consistently lead to a successful Splunk implementation. Every activity offers three implementation options of varying sophistication: Good, Better, and Best. This enables you to select the right option based on your priorities, needs, and goals.
The CoE organizes the activities for a successful Splunk implementation into four Service Areas: Platform Management and Support, Program Management and Value Realization, Use Case and Data Lifecycle, and User and Team Lifecycle. See details about activities and the Service Areas in Activities and Service Areas for the Splunk CoE.
How to use the Splunk CoE handbook
This documentation applies to the following versions of Splunk® Center of Excellence: current