Splunk

The Industry-leading Platform for Operational Intelligence

Your IT systems and technology infrastructure--websites, applications, servers, networks, sensors, mobile devices and the like--generate massive amounts of machine data.

By monitoring and analyzing everything from customer clickstreams and transactions to network activity and call records, Splunk Enterprise turns your machine data into valuable insights.

Troubleshoot problems and investigate security incidents in minutes, not hours or days. Monitor your end-to-end infrastructure to avoid service degradation or outages. Gain real-time visibility into customer experience, transactions and behavior.

Any Data From Any Source

Collect and index any machine-generated data from virtually any source or location in real time. This includes data streaming from packaged and custom applications, application servers, web servers, databases, networks, virtual machines, telecoms equipment, operating systems, sensors and much more. Just point Splunk Enterprise at your data, and it immediately starts collecting and indexing--so you can start searching and analyzing.

Data indexing

Data indexing

Collect Data From Remote Sources

Splunk Forwarders deliver reliable, secure, real-time data collection from up to tens of thousands of sources. They can monitor local data sources--applications, sensors, endpoint devices; collect the output of status commands on a schedule; grab performance metrics from virtual or non-virtual sources; or watch the file system for configuration, permissions and attribute changes. Forwarders are centrally managed, lightweight and can be deployed quickly at no additional cost.

Data forwarding

Data forwarding

Correlates Complex Events

With Splunk Enterprise, you can correlate complex events spanning many diverse data sources across your environment. Types of correlations:

  • Time-based correlations identify relationships based on time, proximity or distance
  • Transaction-based correlations track a series of related events as a single transaction to measure duration, status or other analysis
  • Sub-searches take the results of one search and use them in another
  • Lookups correlate machine data with external data sources outside of Splunk Enterprise
  • Joins support SQL-like inner and outer joins

Correlating events enables richer analysis and insight from your machine data. Read the Event Correlation Technical Brief to learn more.