What You Read The Most: Splunk Lantern’s Most Popular Articles!

[KayeChapman]

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently.

We also host Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.

This month sees Lantern wrap up another financial year, so it’s a great time to take a look back at the articles that resonated most with our community over the past year, as well as over all time. With more than 350,000 new users finding our articles over the past year, it’s been a great year for learning with Lantern. More users are finding value in our articles than ever before, and we’re excited to share the top-performing content that helped you achieve more with Splunk! As ever, we’re also sharing the new articles we published over the past month. Read on to find out more.

Lantern’s Top Content

While Lantern covers a wide range of Splunk use cases and best practices, some articles stood out as clear favorites among our users. Here’s the most-read content across Security, the Platform, and Observability - from foundational guidance to advanced techniques.

Security: Most Viewed Use Cases and Product Tips

Security professionals rely on Splunk’s premium security products to enhance their threat detection, risk management, and security analytics capabilities. Here are the security articles on Lantern that gained the most views last year:

Most Popular Security Use Cases (2024)

• Automating the investigation of emails for malicious content
• Identifying and removing malicious emails with Splunk SOAR from within Microsoft 365 mailboxes
• De-identifying PII consistently with hashing in Edge Processor

Most Popular Security Use Cases (All Time)

• Implementing risk-based alerting in Splunk Enterprise Security
• Using threat intelligence in Splunk Enterprise Security
• Assessing and expanding MITRE ATT&CK coverage in Splunk Enterprise Security

Most Popular Security Product Tips (2024)

• Installing and upgrading to Splunk Enterprise Security 8x​
• Enabling Windows event log process command line logging via group policy object​
• Configuring Windows event logs for Enterprise Security use​

Most Popular Security Product Tips (All Time)

• Managing data models in Splunk Enterprise Security​
• Using the Splunk Enterprise Security assets and identities framework
• Installing and upgrading to Splunk Enterprise Security 8x​

Platform: Most Viewed Use Cases and Product Tips

Splunk users across all industries turn to Lantern for expert advice on searching or optimizing their Splunk Enterprise or Splunk Cloud Platform deployments. Here are the top-read platform articles:

Most Popular Platform Use Cases (2024)

• Monitoring Cisco switches, routers, WLAN controllers and access points
• Using Cross-Region Disaster Recovery for OCC and DORA compliance
• Solution Accelerator for Operational Technology (OT) Security

Most Popular Platform Use Cases (All Time)

• Detecting a ransomware attack
• Monitoring for network traffic volume outliers
• Investigating a ransomware attack

Most Popular Platform Product Tips (2024)

• Sizing your Splunk architecture​
• Understanding how to use the Splunk Operator for Kubernetes​
• Optimizing Splunk knowledge bundles​

Most Popular Platform Product Tips (All Time)

• Writing better queries in Splunk Search Processing Language
• Replacing null values by using the fillnull and filldown commands
• Using ingest actions in Splunk Enterprise

Observability: Most Viewed Use Cases and Product Tips

With Splunk’s observability solutions growing in adoption, more users than ever are relying on Lantern for guidance on monitoring, troubleshooting, and optimizing performance with Splunk. Here’s what stood out in observability last year:

Most Popular Observability Use Cases (2024)

• Instrumenting LLM applications with OpenLLMetry and Splunk​
• Monitoring LangChain LLM applications with Splunk​
• Monitoring VMware components with Infrastructure Monitoring​

Most Popular Observability Use Cases (All Time)

• Managing the lifecycle of an alert: from detection to remediation​
• Monitoring API transactions
• Instrumenting LLM applications with OpenLLMetry and Splunk​

Most Popular Observability Product Tips (2024)

• Rigor to Synthetics Migration - Customer FAQ​
• Monitoring Adobe Experience Manager as a Cloud Service​
• Customizing JMX metric collection with OpenTelemetry​

Most Popular Observability Product Tips  (All Time)

• Accelerating ITSI event management​
• The definitive guide to best practices for ITSI​
• Rigor to Synthetics Migration - Customer FAQ​

A Huge Thank You to Our Contributors!

None of this would be possible without the incredible Splunkers, partners, and community members who share their knowledge with Lantern. This past year we published more than 200 new articles covering Splunk platform best practices, security insights, and observability enhancements. We also hit an exciting milestone - over 1,000 published articles on Splunk Lantern!

Lantern continues to grow as a vital resource for Splunk users. Whether you’re new to Splunk or a seasoned expert, we’re committed to delivering actionable insights to help you succeed.

We’ve got lots more articles and enhancements planned over the coming year, so if you haven’t already, hit the subscribe button on Lantern’s Community blogs label to ensure you’re always up-to-date with the latest news.

Everything Else That’s New

Here’s a roundup of the new articles we’ve published this month:

• Detecting financial fraud using the Splunk App for Behavioral Profiling
• Monitoring mandatory time away (MTA) with the Splunk platform
• Selecting the best method for GCP data ingestion
• Selecting the best method for AWS data ingestion
• Developing add-ons with a Gold Standard methodology

Thanks for being part of the Lantern community - here’s to another year of learning, growing, and making the most of Splunk!

- Kaye Chapman, Senior Lantern Content Specialist for Splunk Lantern