Documentation

Welcome to Splunk's official product documentation!

Here you'll find information for Splunk users, administrators, and developers, as well as Release Notes for the current and earlier versions of Splunk.

Choose your version

Select the version of Splunk that you're running from the drop-down list at the top left of this page. Then choose a manual from the same row, and go from there.

Choose your manual

Choose the manual you'd like to read from the bar above:

• Find system requirements and planning, installation, and migration information in the Installation Manual.
• Learn about searching, monitoring, alerting, and reporting from the User Manual.
• Find out how working with Splunk knowledge objects such as source and event types, saved searches, transactions, and more can make your Splunk deployment even more effective and efficient in the Knowledge Manager Manual (available for versions 4.0 and later).
• Learn how to add data sources to Splunk, create user accounts, define data retention and backup policies, secure your Splunk instance, manage the resources your users use, and perform other system administration tasks in the Admin Manual.
• Find instructions for and examples of building dashboards, creating custom views and Apps, extend Splunk using our REST API, and more in the Developer Manual.
• Look up details about every Splunk search language command and find the Search language cheat sheet in the Search Reference Manual (available for versions 4.0 and later).
• And finally, find out what's new in Splunk, what issues we've found, and what has been fixed in the latest release in the Release Notes.

Make a PDF

If you'd like a PDF of any version of any manual, navigate to that manual and click the pdf version link above the left hand table of contents bar. A PDF version of that manual is generated on the fly for you, and you can save it or print it out to read later.

Find what you need

When you're in a manual, you can use the table of contents to the left of this panel, or simply search for what you want in the search box in the upper right at any time.

If you're interested in more specific scenarios and best practices, you can visit the Splunk Community Wiki to see how other users Splunk IT.

Check out more Resources.

Join the Splunk community!

We want to hear from you! You can contribute:

• Discuss the content of the documentation and suggest improvements using the Discussion tabs on every documentation topic page.
• Create your own topics and talk about what you've done with your Splunk! Check out the Splunk Community Wiki.