Splunk® Center of Excellence

Splunk Center of Excellence Handbook

Download manual as PDF

Download topic as PDF

How to use the Splunk CoE handbook

The Splunk Center of Excellence (CoE) handbook provides guidance for establishing a Splunk implementation based on best practices. The CoE handbook also provides supporting content and reference materials.

The steps to implement a CoE program are: prepare, establish the foundation, and build out the service areas.


To prepare for implementing a CoE program, gather information that clarifies what Splunk software can help you do and the value you want to get from your Splunk implementation.

You can start by taking the optional Center of Excellence (CoE) self-assessment. The CoE self-assessment is a survey that considers your entire Splunk implementation beyond the basic software deployment. The CoE self-assessment takes about 20 minutes to complete. The categories range from operations and business value, to data management, to user and community enablement. The results of the CoE self-assessment indicate where the Splunk CoE can help you focus to create an effective overall strategy for your organization.

Any individual with a splunk.com account can take the CoE self-assessment. Multiple people within your organization can take their own self-assessment.

To access the Splunk self assessment, go to http://splk.it/coe and log in with your splunk.com credentials.

Establish the foundation

The CoE foundation areas are decisions, agreements, and operating infrastructure that establish the purpose, goals, and ownership of your Splunk implementation. For guidelines about how to develop CoE foundations, see Foundations.

Build out the service areas

Service areas are groups of activities and best practices that have a common focus or goal. When you build out the service areas, you create an implementation plan, prioritize those activities, carry out the activities, then continuously iterate and improve as you learn more.

Each of the four service areas includes an activity matrix that lays out specific activities for each implementation level, Good, Better, and Best, depending on whether you are implementing Splunk software as a solution, a service, or a strategy. For more information about the building out the service areas, see Service areas and activities for the Splunk CoE.

About the Splunk Center of Excellence
Release notes for the Splunk CoE

This documentation applies to the following versions of Splunk® Center of Excellence: current

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters