A curated list of awesome apps, visualisations and other resources for Splunk.
Splunk captures, indexes, and correlates real-time data in a searchable
repository from which graphs, reports, alerts, dashboards, and visualizations
can be generated. It is widely used in industries such as finance, utilities,
healthcare and manufacturing for use-cases including security, compliance and
IT service monitoring.
Splunk's Homepage.
Splunk's Community Questions and Answers.
Splunk and Community built apps and add-ons.
Blog posts on various topics.
Develop on Splunk.
Documentation.
Basic resources for getting started with Splunk.
Correlate logs and metrics for infrastructure monitoring.
This kit was compiled based on common issues with Splunk deployments and managing idiosyncrasies that tend to naturally occur.
Recommended Splunk Apps.
Splunk's Home Page for Enterprise Security.
Download page (if licensed).
Splunk documentation for Enterprise Security.
An Awesome list for all things Enterprise Security.
Splunk's Home Page for IT Service Intelligence.
Download page (if licensed).
ITSI Documentation.
An Awesome list for all things IT Service Intelligence.
Premium Apps for Splunk.
Splunk Enterprise Security is the nerve centre of the security ecosystem, giving teams the insight to quickly detect and respond to internal and external attacks, simplify threat management minimizing risk.
Splunk IT Service Intelligence (ITSI) is a monitoring and analytics solution powered by artificial intelligence for IT Operations (AIOps) that provides visibility into health and key performance indicators of critical IT and business services, and its infrastructure.
Interactive timeline with call-outs for events.
Interactive timeline.
Hierarchical, relational pie charts.
A grid of related measurements, colour intensity derived from the value.
Heatmap broken down by days.
Punchcard Visualisation.
Horizon Chart Visualisation.
Sankey Diagram Visualisation.
Spinning globe with events correlated to locations (flashy C-level eye-candy).
Download other custom visualizations from Splunkbase.
Miscellaneous scripts and visualisations.
Security and Syslog related materials.
Many Splunk related items, including details on Splunk ES's Extreme Search.
Security and Machine Learning items.
Miscellaneous Splunk items.
Code for a number of Splunk resources, including [CIM Validation](https://github.com/hire-vladimir/SA-cim_vladiator).
Repository of searches and dashboards to assist with optimising concurrency settings.
Some early resources on Splunk basics and optimisations (infrequently updated).
Search Engine for Splunk Queries split by sourcetype and use-case.
Useful Splunk resources that are not specifically associated with Splunk Inc.
Collections of useful Splunk searches