Splunk best practices are as widespread and diverse as machine data.
Splunk's mission is make machine data accessible, usable and valuable to everyone. The mission of Splunk's Product Best Practices team is to make Splunk software accessible, usable and valuable to everyone. We do this with best practices that maximize and accelerate the value customers get from Splunk software.
To rein in Splunk's widespread best practices, we needed a way to enable subject matter experts—whether they're customers, partners or employees—to consolidate, collaborate on, and vet best practices in one place. And for people seeking answers to request, find and ask follow-up questions in that same place.
Driving a top-down solution seemed logical, but we soon realized that would take too long and we'd never be able to include everyone, let alone drive consensus. Our solution had to be customer facing, searchable and living, and draw from a wide range of subject matter experts on a wide range of topics.
At scale.
Right now.
In short, we needed to crowdsource.
The Splunk approach to data at scale is to ingest data from anywhere and be able to ask it any question at any time.
So we turned to Splunk's own crowdsourcing platform, Splunk Answers. Splunk Answers is like many company Q&A platforms, except, as one customer put it, "it's spiked with a passionate user community and a slew of qualified uber-Splunk ninjas—the SplunkTrust." So these discussions are really an opportunity for Splunk enthusiasts and experts alike to democratically collaborate on the best way to do things. Moderators keep things honest, and tags keep things organized.
This is the getting-data-in phase of the Splunk approach to best practices. Validated content on Splunk Answers becomes a persistent, living repository of wide-ranging best practices ready for immediate access. It also becomes a source for ongoing work inside Splunk to develop schemas that organize these best practices for specific paths.
Crowdsourcing is no fun without a crowd! Follow the validated_best-practice tag to join in the conversation and receive email notifications when new content is posted.
We look forward to collaborating with you in our quest to make Splunk best practices centralized and validated!
The world’s leading organizations rely on Splunk, a Cisco company, to continuously strengthen digital resilience with our unified security and observability platform, powered by industry-leading AI.
Our customers trust Splunk’s award-winning security and observability solutions to secure and improve the reliability of their complex digital environments, at any scale.