What's in this manual
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
What's in this manual
This manual contains information and procedures for the Splunk administrator. If you're responsible for configuring, running, and maintaining Splunk as a service for yourself or other users, this manual is for you.
For example, learn how to:
- add data inputs to Splunk
- add users and set up roles
- configure data security
- back up index and user data
- manage the search jobs your users run
- configure and manage mid- to large-scale deployments
and much more.
Where is all the information about event types and source types etc?
For this all-new version of Splunk, we are trying something different--we've broken out all the information about Splunk knowledge into a separate manual just for the person who handles that information. If that person is you, check the Knowledge Manager Manual. Let us know what you think!
Looking for help with searching in Splunk?
Check out the User Manual and the Search Reference Manual for all things search. In particular, you might want to check out the Search Cheatsheet if you're looking for a quick list of common examples.
Make a PDF
If you'd like a PDF of any version of this manual, click the pdf version link above the table of contents bar on the left side of this page. A PDF version of the manual is generated on the fly for you, and you can save it or print it out to read later.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 View the Article History for its revisions.