Documentation > Splunk > Knowledge Manager Manual > What is Splunk knowledge?

Knowledge Manager Manual

 


Welcome
When you first deploy Splunk
Understand events
Work with fields
Work with hosts
Work with source types
Manage event types
Define tags and aliases
Group events into transactions
Manage saved searches and search jobs
Configure summary indexes

What is Splunk knowledge?

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

What is Splunk knowledge?

Splunk is a powerful tool that helps you see both the details and the larger patterns in your IT data. When you use Splunk you do more than just look at individual entries in your log files; you leverage the information they hold collectively to find out more about your environment.

To do this, you use and create Splunk knowledge. By default, Splunk adds the following knowledge to your data: fields, source types, and event types. You can edit these, and add your own as well.

Splunk knowledge that you define yourself includes tags, saved searches, and transactions.

In this chapter you'll get overviews of these different kinds of Splunk knowledge. In the following chapter you'll learn some specific ways that you can manage and work with these knowledge objects.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/4.0.4/Knowledge/WhatisSplunkknowledge"

This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10 , 4.0.11 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!