User Table of Contents Page

About this manual

• What's in the User Manual

About Splunk

• About Splunk
• About Splunk Licenses

Use Splunk Web

• About Splunk Web
• Change Splunk Web Preferences
• About Splunk Server Settings
• Change Splunk Server Default Settings

Tutorial

• About This Tutorial
• Simple Searches
• Search Results
• Event Types
• Save Options
• Reports
• More Searches

Add inputs

• About Inputs
• Use Data Inputs Page
• Use Crawl

Index

• About Indexes And Indexing
• Manage Your Indexes
• Create New Index
• Delete An Index

Search

• Splunk Search
• Form Search
• Transactions
• Macro Search
• Live Tail

Use Fields

• About Fields
• List Of Default Fields

Tag

• About Tags
• Tag Field Values Including Event Types Hosts And Sources
• Manage Tags With Tagcreate And Tagdelete
• Alias A Source Type

Report

• Run Reports
• Chart Gallery
• Examples Of Useful Reports
• Increase Reporting Efficiency With Summary Indexing

Save, Schedule, and Alert

• Save Schedule Set Alerts And Enable Summary Indexing
• Find And Manage Saved Searches

Use the Splunk Command Line Interface (CLI)

• About Splunks CLI
• Search In The CLI
• CLI Commands
• Change Default Splunk Server Settings

Search reference

• Search Syntax
• Search Pipeline Syntax
• Search Cheatsheet

Modifier reference

• Modifiers
• Search Modifiers
• Time Modifiers

Search command reference

• Search Commands
• Generate Data
• Filter And Reorder
• Extract
• Evaluate
• Transform And Report
• Administrative Commands
• Unsupported Search Commands
• Deprecated Search Commands

* Use {{#topic:Display Name}} to assign within a bullet. Place topic tags below proper section name.