Splunk> IT SearchSplunk> Analytics Engine for Operational Intelligence
The Industry-leading Platform for Operational Intelligence
Your IT systems and technology infrastructure—websites, applications, servers, networks, sensors, mobile devices and the like—generate massive amounts of machine data.
By monitoring and analysing everything from customer clickstreams and transactions to network activity and call records, Splunk Enterprise turns your machine data into valuable insights.
Troubleshoot problems and investigate security incidents in minutes, not hours or days. Monitor your end-to-end infrastructure to avoid service degradation or outages. Gain real-time visibility into customer experience, transactions and behaviour.
Any Data From Any SourceCollect and index any machine-generated data from virtually any source or location in real time. This includes data streaming from packaged and custom applications, application servers, web servers, databases, networks, virtual machines, telecoms equipment, operating systems, sensors and much more. Just point Splunk Enterprise at your data, and it immediately starts collecting and indexing—so you can start searching and analysing.
Collect Data From Remote SourcesSplunk Forwarders deliver reliable, secure, real-time data collection from up to tens of thousands of sources. They can monitor local data sources—applications, sensors, endpoint devices; collect the output of status commands on a schedule; grab performance metrics from virtual or non-virtual sources; or watch the file system for configuration, permissions and attribute changes. Forwarders are centrally managed, lightweight and can be deployed quickly at no additional cost.
Correlates Complex EventsWith Splunk Enterprise, you can correlate complex events spanning many diverse data sources across your environment. Types of correlations:
- Time-based correlations identify relationships based on time, proximity or distance
- Transaction-based correlations track a series of related events as a single transaction to measure duration, status or other analysis
- Sub-searches take the results of one search and use them in another
- Lookups correlate machine data with external data sources outside of Splunk Enterprise
- Joins support SQL-like inner and outer joins