Splunk® Enterprise

Data Model and Pivot Tutorial

Acrobat logo Download manual as PDF

Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Acrobat logo Download topic as PDF

Navigating Splunk Web

Splunk Web is the Splunk browser-based graphical user interface. This topic discusses how to find the pages in Splunk Web that you need to complete this tutorial.

Finding Splunk Home

Splunk Home is your interactive portal to the apps and data accessible from this Splunk deployment.

6.2 splunk home.png

By default, Splunk Home is the first page that you see when you log in. Otherwise, your account might be configured to start in another view such as Search or Pivot in the Search & Reporting app.

You can return to Splunk Home from any other view by clicking on the Splunk logo on the Splunk bar.

Use the Splunk bar

The Splunk bar is common to every page in Splunk Web. You will use it to switch between the editor views when you create data models and pivots in this tutorial.

6.2 splunk bar.png


The Apps panel lists the apps that are installed on your Splunk instance that you have permission to view. Select the app from the list to open it. When you have more than one app, you can drag and drop the apps within the workspace to rearrange them.

You can do two actions on this panel:

  • Click the gear icon to view and manage the apps that are installed in your Splunk instance.
  • Click the plus icon to browse for more apps to install.

The Data Model and Pivot editors are part of the Search & Reporting app.

Explore Splunk Web

The options in the Explore panel help you to get started using Splunk Web. Click on the icons to open the Add Data view, browse for new apps, open the Splunk Enterprise Documentation, or open Splunk Answers.

Next steps

Continue to the next topic to add the tutorial to your Splunk deployment.

Last modified on 11 September, 2017
What you need for this tutorial
Load the tutorial data

This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters