Splunk® Center of Excellence

Splunk Center of Excellence Handbook

Download manual as PDF

Download topic as PDF

Foundation areas for the Splunk CoE

This screen image shows the CoE roadmap, with the four Foundation areas, Charter, Executive Sponsor, Metrics, and Operating Model, depicted as part of the baseline event. The text "baseline event in progress" appears next to each Foundation area. The text "you are here" is displayed on the Foundation areas.

The Splunk Center of Excellence (CoE) foundations are decisions, agreements, and operating infrastructure that establish the purpose, goals, and ownership of your Splunk implementation to help you obtain maximum value with maximum efficiency. Like building a house, a strong foundation enables you to build as high as you need to go. A strong foundation ensures a better track record of success, and prepares you to handle situations as they arise.

Here is a brief overview of the four CoE Foundations. All Foundations are equally important. Learn more about each Foundation area using the links below.

Foundation areas Primary purpose Jump to topic
Charter Decide whether to use Splunk as a solution, service, or strategy. Choose a centralized, federated, or hybrid governance model.

Choose a mission objective

Executive Sponsor Identify an executive or senior leader who can provide resources and political endorsement.

Appoint your executive sponsor

Metrics Decide how to monitor the health of your deployment and measure success.

Set up your Metrics dashboard

Operating Model Identify a program manager.

Define your Operating Model

Benefits of CoE Foundations

CoE Foundations help you avoid the most common pitfalls
Without CoE Foundations, your deployment can encounter roadblocks to growth, or even worse, system or program failure.
CoE Foundations can evolve and change as you mature
Once you define CoE Foundations, you can update and adapt them as you mature your deployment. It's OK to make an initial choice now, and adopt a different approach at a later stage.

You complete Foundations during the baseline event with your Splunk account team. The next topics of the CoE handbook provide guidance on how to complete each Foundation area.

It is important that you to take the time to get the Foundations in place before building out your implementation plan. Building things out before the Foundations are in place often leads to issues and problems.

You can complete CoE Foundations in one hour or less. The CoE Foundations provide worksheets and templates that make establishing the Foundations a series of simple decisions.

If you have gaps in Foundations that will take longer to address, you can add the gaps to your implementation plan.

For more information about the baseline event and the implementation plan, see Schedule the baseline event.

Release notes for the Splunk CoE
Charter for the Splunk CoE

This documentation applies to the following versions of Splunk® Center of Excellence: current

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters