Skip to main content
Splunk Lantern

Getting data into Enterprise

 

To best start onboarding and beginning to work with data in Splunk Enterprise, review the following general steps. 

  • First, decide on the objective you want to achieve using Splunk Enterprise. Then identify the data you need in Splunk Enterprise to help you complete that objective. 
  • Use Splunk Lantern’s security and observability use case libraries to discover new applications for your data. 

Onboarding your data 

Getting data in - Linux

Install a *nix universal forwarder

Getting data in - Forwarders