Onboarding new users in Splunk Enterprise

To help maximize the value of your users receive from Splunk Enterprise, the friendly Splunk Customer Success team created this quick reference list that highlights how customers can best start onboarding new users in Splunk Enterprise.

• Head on over to Splunk Education to find all the training you need.
• Make your role-based access control more granular by organizing user access requirements into functional categories, such as data access or search restrictions.
• Build user group workspaces for a specific role or user group to enable users to search, explore, and create without distractions from other teams and users.
• Set up knowledge management practices now to avoid costly misinterpretation of your data later. Get started with “What is Splunk knowledge?”
• Define a knowledge manager role. This person can create guidelines to manage knowledge objects, normalize event data, and create data models for Pivot users.
• Review your company's requirements. Identify who needs access to which data sets, if there are any that should be private, such as data with PII, and so on. You can add and edit roles with Splunk Enterprise based upon requirements.
• Map LDAP groups to Splunk roles. Splunk Enterprise users can work with the repository administrator to set up user authentication with LDAP and configure Single Sign-On with reverse proxy.