Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently. The site also hosts Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.
This month we’re excited to announce the launch of a new live chat tool to help make it even easier for you to implement Lantern’s guidance! We’ve also got a fresh new batch of articles to share with you. Read on to find out more.
Chat With us
The Lantern team is proud to have a huge and growing library of actionable articles that you can pick up and apply straight away in your own environment. But there might be times that you have a question about how something is configured, or need some help from an expert to be sure that you’ve implemented things right.
That’s why we’re proud to say that we have partnered with Splunk’s OnDemand Services team on a live chat feature to help you solve problems in real-time. The chat system connects you instantly to one of our OnDemand experts, who can provide assistance on the specifics of our articles, as well as connect you to other ways you can get help from us.
This initial trial of our chat feature is only available until Friday, November 18, so hop onto Lantern today and test it out with your most urgent Splunk implementation questions. Get started by interacting with the chat widget at the bottom-right-hand corner of all pages below our homepage.
We hope this extra layer of help gives you even more ways you can successfully implement our use cases, get our products working smoothly, and do even more with your data!
New Security Articles
This month has been a quieter month for Security-related articles, but we’re excited about our new additions, especially our new risk-based alerting article. Risk-based alerting is a consistently popular topic on Lantern, so we’re happy to bring this new article to our library. Investigating interesting behavior patterns with risk-based alerting includes a demo that helps you work with interesting events without adding extra noise to your already noisy alert environment. Risk-based alerting can help you improve your operational maturity, operationalize the MITRE ATT&CK framework, and reduce alert volume while increasing alert fidelity.
If you’re a Splunk Enterprise Security user, Using the Splunk Enterprise Security assets and identities framework helps you learn to use the Splunk Enterprise Security Assets and Identities Manager to correlate asset and identity information with events to provide context and enrich data.
New Observability Articles
Adopting monitoring frameworks - LETS is a new article on monitoring frameworks. It introduces the 4 “Golden Signals” of Latency, Errors, Traffic, and Saturation (LETS), which provides a generic framework you can use to understand your software and infrastructure. It then shows you how this framework can also be applied to non-software-related scenarios.
Minimizing alert storms in cloud and hybrid IT environments teaches you how to prevent alert storms and increase alert context with notifications from Splunk Observability Cloud detectors.
Another article on Splunk Observability Cloud, Reducing time-to-resolution with interactive runbooks helps you build robust runbooks to reduce your organization's mean-time-to-resolution and make it less likely you'll get woken up in the middle of the night for escalations.
Updates to the Use Case Explorer for Observability
We’ve also published several new articles this month that are part of our popular Splunk Use Case Explorer for Observability.
Monitoring AWS Lambda functions explains how to instrument Lambda functions to get visualizations, tagging, custom metrics, and detector notifications similar to what's in Splunk APM for microservice architectures.
Identifying application performance improvement opportunities shows you how to use Splunk Synthetic Monitoring to identify bugs, prioritize fixes, and optimize content that negatively impacts the performance of your application.
Finally, Optimizing application, service and memory usage with AlwaysOn Profiling for Splunk APM teaches you how AlwaysOn Profiling for Splunk APM can help you optimize application/service performance (CPU profiling) and memory usage optimization (memory profiling).
What Else?
This month, we’ve published some articles that include tips that aren’t security or observability-specific, as well as a new data article.
Telling stories with your data using data visualizations includes a helpful video that introduces some ways you can use your data visualizations to tell stories - where your data points are used to express ideas, patterns, and insights to help understand what's happening.
If you’re a Cloud user and ever find that there are occasions when searches don’t run as expected, Troubleshooting and investigating searches in Splunk Cloud Platform could be useful for you. It provides guidance on how to troubleshoot searches when this occurs, and provides tips so you can dig into the details of the search to understand what's happening.
Lastly, if you’re interested in capturing, filtering, indexing, and analyzing streams of network event data, our new article Installing and configuring Splunk Stream helps you learn how to configure the app so you can start working with this data.
We hope you’ve found this update helpful. Thanks for reading!
— Kaye Chapman, Customer Journey Content Curator for Splunk Lantern
