Splunk® Enterprise

Analytics Workspace

Splunk Enterprise version 8.0 is no longer supported as of October 22, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Navigating the Analytics Workspace

The Analytics Workspace contains three panels. The left-side Data panel shows all data sources that are available for analysis. The main panel in the center is where you see your data represented in charts. The right-side Analysis panel lists the aggregations and analytic functions that you can apply to your data.

This screen image shows an overall view of the Analytics Workspace. Different parts of the workspace are labeled with numbers.

Number Element Description
1 Data panel Search or browse for data to view and analyze.
2 Main (center) panel View and manipulate time series of your data.
3 Time range picker Select a common time range to display for all charts.
4 Chart title Chart titles consist of the data source name.
5 Refresh Refresh charts to include the most recent data. Refresh manually or enable auto-refresh.
6 Clear all Clear all charts from the workspace.
7 Grid layout or stack layout Display charts in grid layout, which displays multiple charts in each row, or stack layout, which displays one chart per row.
8 More workspace options Save all charts in the workspace to a dashboard.
9 More chart options Open chart in search, search for related events, save as alert, save as dashboard panel, save as report, clone panel, or export as PNG or CSV.
10 Pinpoint time range Hover to view a shared hairline on all charts. Click and drag to zoom in on a narrower time range.
11 Analysis panel Perform analytic functions and operations.
Last modified on 08 January, 2021
Open the Analytics Workspace   Types of data in the Analytics Workspace

This documentation applies to the following versions of Splunk® Enterprise: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters