Getting Started with Splunk Cloud

Follow our step-by-step guide through the basics of Splunk Cloud. No pressure — this guide uses a sample dataset, so you can get up-to-speed on Splunk quickly.

Read the tutorial ›

Learn the ins and outs of Splunk from one of our own expert instructors in this self-paced eLearning class. 

Learn more ›

• Intro to Getting Data In
  (Splunk Docs, 4 pages)
• What data can I index?
  (Splunk Docs, 2 pages)
• Get Started with Getting Data In
  (Splunk Docs, 1 page)
• Get Windows data into Splunk Cloud
  (Splunk Docs, 1 page)
• Get *nix Data into Splunk Cloud
  (Splunk Docs, 1 page)

• How to forward data to Splunk Cloud
  (Splunk Docs, 1 page)
• Installing a *nix Universal Forwarder
  (Splunk Docs, 6 pages)
• Installing a Windows Universal Forwarder
  (Splunk Docs, 7 pages)

• Getting Started with Splunk Search
  (Splunk Docs, 2 minute read)
• Splunk Search Tutorial
  (Splunk Docs, 3 minute read)
• The Basics of Splunk Search
  (Answers Community Best Practices)

• Splunk Cloud Search Reference
  (Splunk Docs, 2 minute read)
• Splunk Search Commands by Category
  (Splunk Docs, 10 minute read)
• Specifying Time Ranges
  (Splunk Docs, 5 minute read)

• Search Tips & Tricks Blog Post
  (blog, 5 minute read)
• Search Optimization
  (Answers Community Best Practices)

• Dashboards & Visualizations
  (Splunk Docs, 2 minute read)
• Dashboard Basics
  (Answers Community Best Practices)

• Dashboards Quick Reference Guide
  (PDF, 6 pages)
• SplunkStart — Pre-Built Dashboard Templates
  (blog, 15-minute read)
• Pre-Built Dashboards with the Splunk Start App
  (Splunkbase App)

• Next-Generation Dashboards
  (.conf session, 35:46)
• Advanced dashboarding Tips and Techniques
  (.conf session, 11:09)

• Reports
  (Splunk Docs, 1 min read)
• Create and Edit Reports
  (Splunk Docs, 17 minute read)

• Getting Started with Alerts
  (Spunk Docs, 1 min read)
• The Alerting Workflow
  (Splunk Docs, 2 minute read)
• Addressing Alert Fatigue
  (.conf session, 14:31)

These use cases suggest how to get data in, search for insights and fine-tune results from across your operations infrastructure using a single diagnostic platform.

• Application Lifecycle and Release Analytics (Splunk Docs & Answers Community)
• Application Monitoring and Triage (Splunk Docs & Answers Community)
• Cloud Monitoring (Splunk Docs & Answers Community)
• Container Monitoring (Splunk Docs & Answers Community)
• Infrastructure Troubleshooting (Splunk Docs & Answers Community)
• Server and Operating System Monitoring (Splunk Docs & Answers Community)
• Virtualization Infrastructure Troubleshooting (Splunk Docs & Answers Community)

These use cases come from Splunk Enterprise Security (ES) and Splunk Security Essentials (SSE), and reference validated best practices published on Splunk Answers.

• Security Monitoring Examples
  (Splunk Docs & Answers Community)
• Advanced Threat Detection Examples
  (Splunk Docs & Answers Community)
• Insider Threat Detection Examples
  (Splunk Docs & Answers Community)
• Compliance Examples
  (Splunk Docs & Answers Community)
• SOC Automation Examples
  (Splunk Docs & Answers Community)
• Splunk Security Essentials
  (SplunkBase App, free with demo data)