Manage Knowledge Objects

Create, use, and manage event types, tags, lookups, field extractions, workflow actions, reports, views, and data models.

Knowledge Management Manual

Use knowledge objects to enrich, interpret, classify, and normalize your data. Manage knowledge objects with Splunk Web and configuration files.

Pivot Manual

Build pivots to report on specific datasets without needing to use the Splunk Search Processing Language (SPL).

Splunk App for Lookup File Editing

Edit, import, and export lookup files, including KV store and CSV-based files, using a spreadsheet-style interface in the Splunk platform.