Search and Reporting app
By default, Splunk Enterprise provides the Search and Reporting app. This interface provides the core functionality of Splunk Enterprise. The Splunk Home page provides a link to the app when you first log into Splunk Web.
Find Splunk Search and Reporting
- If you are not on the Splunk Home page, click the Splunk logo on the Splunk bar to go to Splunk Home.
- From Splunk Home, click Search & Reporting in the Apps panel.
This opens the Search Summary view in the Search app.
Search Summary view
The Search Summary view includes common elements that you see on other views, including the Applications menu, the Splunk bar, the Apps bar, the Search bar, and the Time Range Picker. Elements that are unique to the Search Summary view are the panels below the Search bar: the How to Search panel, the What to Search panel, and the Search History panel.
|1||Applications menu||Switch between Splunk applications that you have installed. The current application, Search & Reporting app, is under "Apps" and displays a check mark. This menu is on the Splunk bar.|
|2||Splunk bar||Edit your Splunk configuration, view system-level messages, and get help on using the product.|
|3||Apps bar||Navigate between the different views in the application you are in. For the Search & Reporting app the views are: Search, Metrics, Datasets, Reports, Alerts, and Dashboards.|
|4||Search bar||Specify your search criteria.|
|5||Time range picker||Specify the time period for the search, such as the last 30 minutes or yesterday. The default is Last 24 hours.|
|6||How to search||Contains links to the Search Manual and the Search Tutorial.|
|7||What to search||Shows a summary of the data that is uploaded on to this Splunk instance and that you are authorized to view.|
|8||Search history||View a list of the searches that you have run. The search history appears after you run your first search.|
Apps and add-ons
Configure Splunk Web to open directly to an app
This documentation applies to the following versions of Splunk® Enterprise: 8.1.0, 8.1.1, 8.1.2, 8.1.3