Splunk® Success Framework

Splunk Success Framework Handbook

Download manual as PDF

Download topic as PDF

Purpose and scope best practices for a Splunk deployment

Define a purpose and scope for your Splunk implementation to focus on what you want to use Splunk software and solutions to do. Who are the stakeholders? How do you want to use Splunk software and solutions to leverage your machine data? Defining a purpose and scope sets expectations among stakeholders, and helps prioritize the decisions you make and the actions you take.

Guidelines for defining a purpose

Use these guidelines to establish a purpose for your Splunk implementation.

Define clear objectives you want to use Splunk software and solutions to achieve
Knowing these basic goals helps focus your efforts. Clear objectives also communicate clearly to executive sponsors and stakeholders the return on investment the organization will receive from Splunk software and solutions.
Investigate any constraints on your Splunk implementation
Constraints can include things like access to data, adequate staffing, or user education. Knowing these constraints up front can help set expectations about how to resolve them.
Identify your stakeholders
Stakeholders are any group who will benefit from the answers and insights Splunk software and solutions provide from your machine data. For guidelines about how to build a strong, comprehensive list of stakeholders, see Stakeholder best practices.
List the benefits of implementing Splunk software and solutions on your machine data
Beyond meeting initial objectives, implementing Splunk software and solutions brings other benefits, such as optimizing your data infrastructure, getting smarter about your machine data, and the possibility of learning things you didn't even know to ask. Listing benefits beyond the initial objectives helps motivate your implementation team and inspire your stakeholders about the benefits of Splunk software and solutions.

Guidelines for defining a scope

Scope defines how you want to implement Splunk software and solutions in your data infrastructure.

Splunk as a solution
Use Splunk software to address use cases for a single team, group, or purpose.
Splunk as a service
Use Splunk software to provide Splunk-related services for multiple teams, groups, and purposes.
Splunk as a strategy
Use Splunk software to provide mature services that position Splunk as a competitive differentiator for your business.
PREVIOUS
About the SSF fundamental best practices
  NEXT
Executive sponsor engagement best practices for a Splunk deployment

This documentation applies to the following versions of Splunk® Success Framework: ssf


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters