Splunk Search

Splunk Simulator

mhenrick
New Member

Hi All,

I was wondering if any of you knew of a Splunk simulator (where I could upload a CSV and check my searches without having to create an entire testing environment/run tests on production data).

Thank you

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

Splunk is very versatile and configurable, so a universal simulator might not work for every case. There is a data preview available within Splunk to make sure events get broken correctly before you add a new input. Other than that, I'd setup a test instance with a dev license that has the same apps as your production, that way you know if it will work or not.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Splunk is very versatile and configurable, so a universal simulator might not work for every case. There is a data preview available within Splunk to make sure events get broken correctly before you add a new input. Other than that, I'd setup a test instance with a dev license that has the same apps as your production, that way you know if it will work or not.

0 Karma

mhenrick
New Member

Thanks a lot, I'll try to do a data preview tonight!

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Splunk App for Anomaly Detection End of Life Announcement

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...