Skip to main content


Splunk Lantern

Getting data into Splunk Enterprise

To best start onboarding and beginning to work with data in Splunk Enterprise, review the following general steps. 

  • First, decide on the objective you want to achieve using Splunk Enterprise. Then identify the data you need in Splunk Enterprise to help you complete that objective. 
  • Use Splunk Lantern’s securityIT, and observability use case libraries to discover new applications for your data.

Next, use the links to below to learn more about the key steps in each of these processes. 

Onboarding your data 

Getting data in - Linux

Install a *nix universal forwarder

  • Was this article helpful?