Splunk Lantern’s Most Popular Articles, New Use Cases & More

[KayeChapman]

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently.

We also host Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.

This month we’re featuring our annual rundown of the Lantern articles that are getting the most views, as well as sharing some interesting site metrics with you from our past financial year. We’ve also published new use cases, product tips, and more! If you want to jump straight to our new articles, scroll to the bottom to find them.

Splunk Lantern’s Top Articles

Splunk has just ended its financial year, so here on Team Lantern we’ve been looking at our yearly metrics to see how much we’ve grown. And our growth has been amazing! Over the past financial year, Lantern has seen nearly a million unique page views - 975,940, which compared to last year’s 613K, represents a 59% increase. We’ve welcomed 314k new users to Lantern, a 75% increase year-on-year. And we have grown our passionate base of returning users to 310k, a figure that’s nearly doubled from last year’s 161k.

We’re deeply proud of how we’ve grown to serve so many of you with articles that help you get more value from your Splunk implementation. While we offer hundreds of articles in dozens of areas of interest, here are the pages that came out on top with the most page views over the past year in each of our categories. We hope that you can be inspired by the same Lantern articles that inspired so many Splunk users over the past year!

Security

Most popular use cases published in FY24

• Assessing and expanding MITRE ATT&CK coverage in Splunk Enterprise Security
• Protecting Operational Technology (OT) environments
• Detecting consumer bank account takeovers

Most popular use cases of all time

• Implementing risk-based alerting in Splunk Enterprise Security
• Using threat intelligence in Splunk Enterprise Security
• Assessing and expanding MITRE ATT&CK coverage in Splunk Enterprise Security

Most popular product tips published in FY24

• Using Threat Intelligence Management
• Configuring Windows security audit policies for Enterprise Security visibility
• Sending events from the Splunk platform to SOAR

Most popular product tips of all time

• Using the Splunk Enterprise Security assets and identities framework
• Onboarding data to Splunk Enterprise Security
• Configuring Windows security audit policies for Enterprise Security visibility

Platform

Most popular use cases published in FY24

• Detecting malicious activities with Sigma rules
• Monitoring major Cloud Service Providers (CSPs)
• Building a data-driven law enforcement strategy

Most popular use cases of all time

• Detecting a ransomware attack
• Monitoring for network traffic volume outliers
• Investigating a ransomware attack

Most popular product tips published in FY24

• Replacing null values by using the fillnull and filldown commands
• Using ingest actions in Splunk Enterprise
• Working with multivalue fields

Most popular product tips of all time

• Writing better queries in Splunk Search Processing Language
• Replacing null values by using the fillnull and filldown commands
• Using ingest actions in Splunk Enterprise

Observability

Most popular use cases published in FY24

• Managing the lifecycle of an alert: from detection to remediation
• Identifying DNS reliability and latency issues
• Monitoring availability and performance in non-public applications

Most popular use cases of all time

• Managing the lifecycle of an alert: from detection to remediation
• Monitoring Kubernetes pods
• Monitoring API transactions

Most popular product tips published in FY24

• Getting started with the Microsoft Teams Add-on for Splunk
• Collecting Mac OS log files
• Getting Docker log data Into Splunk Cloud Platform with OpenTelemetry

Most popular product tips of all time

• Getting started with Microsoft Azure Event Hub
• Getting started with the Microsoft Teams Add-on for Splunk
• Installing Splunk Connect For Syslog (SC4S) on a Windows network

Huge thanks is due to all of our contributors who share their helpful knowledge through our articles. If you're a Splunker who could write an article for us that might make it into our most popular lists next year, then drop us a comment below!

This Month’s New Articles

Here’s the complete list of everything that’s new on Lantern, published over the month of January:

• Splunk 9.1.3 FAQ
• Using Admin Config Service (ACS) in Splunk Cloud Platform FedRAMP environments
• Migrating to Mission Control
• Converting complex data into metrics with Edge Processor
• Using Dashboard Studio inputs in the canvas
• Using the events viewer visualization in Dashboard Studio
• Showing and hiding Dashboard Studio elements based on data availability
• Converting a Classic dashboard to Dashboard Studio
• Using the Link to Search and Link to Reports interactions in Dashboard Studio
• Configuring the trellis layout in Dashboard Studio

We hope you’ve found this update helpful. Thanks for reading!

Kaye Chapman, Senior Lantern Content Specialist for Splunk Lantern