Purpose and scope best practices for a Splunk deployment
Define a purpose and scope for your Splunk implementation to focus on what you want to use Splunk software and solutions to do. Who are the stakeholders? How do you want to use Splunk software and solutions to leverage your machine data? Defining a purpose and scope sets expectations among stakeholders, and helps prioritize the decisions you make and the actions you take.
Guidelines for defining a purpose
Use these guidelines to establish a purpose for your Splunk implementation.
- Define clear objectives you want to use Splunk software and solutions to achieve
- Knowing these basic goals helps focus your efforts. Clear objectives also communicate clearly to executive sponsors and stakeholders the return on investment the organization will receive from Splunk software and solutions.
- Investigate any constraints on your Splunk implementation
- Constraints can include things like access to data, adequate staffing, or user education. Knowing these constraints up front can help set expectations about how to resolve them.
- Identify your stakeholders
- Stakeholders are any group who will benefit from the answers and insights Splunk software and solutions provide from your machine data. For guidelines about how to build a strong, comprehensive list of stakeholders, see Stakeholder best practices.
- List the benefits of implementing Splunk software and solutions on your machine data
- Beyond meeting initial objectives, implementing Splunk software and solutions brings other benefits, such as optimizing your data infrastructure, getting smarter about your machine data, and the possibility of learning things you didn't even know to ask. Listing benefits beyond the initial objectives helps motivate your implementation team and inspire your stakeholders about the benefits of Splunk software and solutions.
Guidelines for defining a scope
Scope defines how you want to implement Splunk software and solutions in your data infrastructure.
- Splunk as a solution
- Use Splunk software to address use cases for a single team, group, or purpose.
- Splunk as a service
- Use Splunk software to provide Splunk-related services for multiple teams, groups, and purposes.
- Splunk as a strategy
- Use Splunk software to provide mature services that position Splunk as a competitive differentiator for your business.
About the SSF fundamental best practices
Executive sponsor engagement best practices for a Splunk deployment
This documentation applies to the following versions of Splunk® Success Framework: ssf