Topics

| pdf version

How Splunk Works

How Splunk Works

Getting Started

Configuring a Splunk Deployment

Choose a Deployment Model
Decide how Splunk should index your data
Install Splunk on every host
Documentation:Admin:SOURCEEND:2.1
Configure the forwarding servers
Set up the deployment server
Start Splunking

Data Inputs

Hosts

Source Types

Timestamp Recognition

Events

Event Types

Meta Events

Fields

Segmentation

How segmentation works

Saved Searches and Alerts

Authentication

Data Distribution

How data distribution works
Enable forwarding and receiving
Documentation:Admin:SOURCEEND:2.1
Documentation:Admin:SOURCEEND:2.1
Route data to third-party systems
Documentation:Admin:SOURCEEND:2.1
Enable cloning
Set up routing
Set up data balancing
Filter data before forwarding
Route specific events to an alternate index
Filtering and routing

Granular Access Control

How Granular Access Control works

Distributed Search

Deployment Server

Index Management

Bundles

SplunkBase

Performance Tuning

Routine Maintenance

Troubleshooting

Toolbox

Splunk > The IT Search Company

Search and navigate IT data from applications, servers and network devices in real-time.
Download Splunk

Localized Splunk documentation

Looking for Splunk documentation in other languages?

Download manuals in other languages

Documentation | Discussion | View source | History

Admin:SOURCEEND:2.1

This documentation does not apply to the most recent version of Splunk.

This documentation applies to the following versions of Splunk: 2.1 , 2.2 , 2.2.1 , 2.2.3 , 2.2.6 , 3.0

Retrieved from "http://www.splunk.com/base/Documentation/3.0/Admin/SOURCEEND"

Start Prev: Route data to third-party systems Next: Enable cloning

Categories: V:2.1 | V:2.2 | V:2.2.1 | V:2.2.3 | V:2.2.6 | V:3.0

Revision: 207 Contact Privacy Policy Terms of Use Community content licensed under Creative Commons