report builder

noun

The part of Splunk that enables you to define reports, generate charts, and define the formatting for those charts. It is broken up into two stages. The first stage enables you to set up reporting commands for an otherwise ordinary search. The second stage generates a chart based on that search and then enables you to change the the formatting options for that search. After you're done fine-tuning the formatting you can save, print, and export the results.

For more information

In the User Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time