Search Manual

Welcome to the Search Manual

This manual discusses Splunk Search and how to use the Splunk search processing language.

If you are new to Splunk Enterprise and search, start with the "Search Tutorial". The Search Tutorial introduces you to the Search and Reporting app and takes you through adding data, searching your data, and building simple reports and dashboards.

Before you can start using Splunk search,

• Add data to your Splunk instance. See how to get data into Splunk in the "Getting Data In Manual".
• Understand how indexing works in Splunk Enterprise. See how Splunk processes data in the "Managing Indexers Manual".
• Understand fields and knowledge objects, such as host, source type, and event type. See the "Knowledge Manager Manual".

For the catalog of search commands and arguments that make up the Splunk search processing language, see the Search Reference Manual.