Splunk is a data analytics and observability platform for logs, metrics, and traces. It ingests machine data from applications, infrastructure, cloud services, and security tools; indexes it at scale; and lets you interrogate it with SPL (Search Processing Language) using a schema-on-read model. Beyond ad hoc searching and monitoring, Splunk powers real-time detection, historical analytics, dashboards, and automated actions, with major use cases in SIEM and security analytics.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

An Overview of Splunk

  • Carlos Moreno Buitrago,
  • Deep Mehta

摘要

Splunk is a data analytics and observability platform for logs, metrics, and traces. It ingests machine data from applications, infrastructure, cloud services, and security tools; indexes it at scale; and lets you interrogate it with SPL (Search Processing Language) using a schema-on-read model. Beyond ad hoc searching and monitoring, Splunk powers real-time detection, historical analytics, dashboards, and automated actions, with major use cases in SIEM and security analytics.