Search and reporting
The Search and Reporting app lets you search your data, create data models and pivots, save your searches and pivots as reports, configure alerts, and create dashboards. This app is provided by default.
Search
The Search Manual describes how to search and use the Search Processing Language (SPL). See Search Reference for syntax, descriptions, and examples for each search command.
| Task: | Look here: |
|---|---|
| Learn how to search and use the Search Processing Language | About the Search Tutorial |
| Learn more about the Search Processing Language | |
| Find a specific search command or function | |
| Manage search jobs |
Create Pivots
The Knowledge Manager Manual describes how to design and build data models using the data model editor. The Pivot Manual describes how to build pivots tables and charts.
| Task: | Look here: |
|---|---|
| Learn about data models and how to build them | About data models |
| Learn more about Pivot and how to use the Pivot Editor to design tables and charts | Pivot Manual |
Reports
See more about reports and report management in the Reporting Manual.
| Task: | Look here: |
|---|---|
| Use search commands to generate reports | About transforming commands and searches |
| Learn about types of visualizations | |
| Save a search or pivot as a report | Create and edit reports |
|
Accelerate a report Understand requirements for report acceleration |
Accelerate reports |
| Schedule a report | Schedule reports |
| Generate a PDF of your report | Generate PDFs of your reports and dashboards |
Alerts
See how to create and dispatch alerts in the Alerting Manual.
| Task: | Look here: |
|---|---|
| Learn about alerts | Getting started with alerts |
| Set up email notifications, RSS notifications, or alert scripts | Set up alert actions |
| See alerting examples | Alert examples |
| See recently triggered alerts | Triggered alerts |
| Set up alerts using the configuration files | Configure alerts in savedsearches.conf |
Create dashboards and visualizations
See the Dashboards and Visualizations manual for more information on the visualization and dashboard workflow and using the Splunk Web Framework.
| Task: | Look here: |
|---|---|
| Learn about creating and editing dashboards | Dashboard overview |
| Learn about types of visualizations | Visualization reference |
| Learn about the default activity and summary dashboards | Splunk Enterprise summary dashboard |
| Learn about the Splunk Web Framework | Splunk Web Framework Overview |
| Splunk Enterprise administration | Manage Splunk Enterprise knowledge |
This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.3.0, 9.3.1, 9.3.2
Download manual
Feedback submitted, thanks!