Mastering Splunk

Splunk object management with knowledge management

If you are your organization's sole Splunker or are a part of a larger team or perhaps a Splunk administrator, sooner or later you will be faced with an ever-growing number of Splunk knowledge objects. In the most vivid example, organizations that have multiple teams of Splunkers will even have a number of objects that solve the same problem.

Splunkers, including you, might find themselves doing the following:

• Sorting through a large number of Splunk objects
• Interpreting misleading or conflicting names
• Struggling to just find the existing objects
• Adapting objects that have unevenly applied app assignments and permissions
• Recreating objects already existing elsewhere in the system

Hence, even a minimalist ...