Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently.
We also host Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.
This month we’re focusing on a swathe of new articles written by fantastic Splunk partners. Our partners have a wealth of expertise in supporting use case implementation and delivering success to Splunk users, so we’re proud to have recently launched several new articles that allow you to use their knowledge for your benefit.
Articles From Our Partners
Splunk’s partners are true experts in working with Splunk, so we’re excited to share these new articles with you. The insights and knowledge that our partners share through Lantern comes from valuable real-world experience working directly with customers like you. The topics our partners write about all contain actionable tips and useful best practices that you can apply to your own environment, helping you easily improve the way you work with Splunk.
Identifying Lantern articles written by partners is easy - you’ll see the name of the partner who wrote the article at the top of the article, just underneath the article title - you can see this in the example image below. The partner’s name displayed here is a link that you can click to see everything else they’ve written in Lantern. You’ll also find more information about each partner at the end of each article.
Let’s dive in and take a look at the new partner-written articles we’ve published over the past month.
If you’re looking to improve your data onboarding to make your Splunk deployment more efficient and to save money with workload pricing, check out Configuring new source types. This article shares ten key configurations that you need to be aware of when setting up a new source type, helping save the Splunk platform work when parsing events and sending data to indexers.
Getting Okta data into the Splunk platform and Enabling Okta single sign-on in the Splunk platform are must-reads if you’re interested in working with Okta. The articles share how to enable single sign-on, ingest Okta data, and report and audit on Okta with the Splunk platform, with step-by-step processes you can follow to achieve this.
On the topic of cloud migration, Selecting the best cloud migration approach explains some of the pros and cons of the different approaches available to customers when migrating to the cloud - whether you’re looking to start fresh in Splunk Cloud Platform without migrating historical data, running both environments before switching over, or performing a full migration of the on-premises deployment. This article is a great companion to our existing Splunk Cloud Platform Migration guidance.
Writing better queries in Splunk Processing Language is a great article for anyone writing SPL regularly. The examples here help you learn how to write queries that minimize the number of trips to the indexers, minimize the amount of data coming back from the indexers, perform calculations on the smallest amount of data, and use non-streaming commands as late in the query as possible. These tips help you write effective queries that lead to quick and efficient search performance.
Last but not least, Using the Splunk Enterprise Security assets and identities framework is useful for anyone looking to use the Assets and Identities Manager in Splunk Enterprise Security. It will help your analysts and incident responders get the information they need to work more effectively.
What Else?
We published several other articles and made lots of updates to existing content throughout December. Our Data Descriptors are also undergoing a major overhaul, so if you haven’t looked there lately, take a look and see if there’s a new data source or data type you’d be interested to learn more about.
Our new articles you might be interested to see include:
- Detecting insider threats
- Reducing platform management time with Splunk Assist
- Creating better custom applications with the Splunk UI toolkit
- Leveraging crime statistics to improve public safety
We hope you’ve found this update helpful. Thanks for reading!
— Kaye Chapman, Customer Journey Content Curator for Splunk Lantern
