• Atlas App Suite Version History Overview

    The following table has a detailed view of each Element in the Atlas App Suite. Scroll down to the Version Table to see additional details. To view the version of your Atlas Platform, check the header on Atlas Core navigation bar. To view the version of a Atlas Element, while…

  • Understanding Data Utilization

    Data Utilization is the sister element of Data Management. While Data Management helps Admins and Users onboard and track live data feeds, Data Utilization tracks how the data itself is being utilized, and if data should be discontinued to save ingest space. Need to investigate if high ingest data is…

  • Identify Wasteful Data with Data Utilization

    Using the Data Utilization element, Admins can create a starting point for analyzing what data could potentially be deprecated, and how much impact that will have on their Splunk Environment. This is an important part of the Splunk lifecycle for reducing Splunk license cost. Navigating to the Data Utilization dashboard…

  • Identify how Data is being searched with Data Utilization

    On the Data Utilization Element, users will see the Utilization Report that lists all Index Sourcetype pairings found in the Splunk environment. The table provides columns to see how this data is currently being searched in three categories: Ad Hoc Queries This column shares the number of times this index…

  • Understanding Scheduling Inspector

    Scheduling Inspector is the sister Element to Scheduling Assistant. While Scheduling Assistant helps you schedule your Scheduled Searches to reduce concurrency risk, Scheduling Inspector inspects your search configurations to ensure they meet best practices. These configurations include your search time spans and ownership. To use Scheduling Inspector to verify and…

  • Re-assigning Orphan Searches using Scheduling Inspector

    Scheduling Inspector gives users the tools to re-assign Orphan Searches to new accounts. To start this process, go to the Orphaned Searches dashboard of the Scheduling Inspector Element A list of Orphan Searches, if there are any, will populate under the Inventory of Orphaned Reports. Orphan Searches are when previous…

  • Identify Scheduled Searches that are missing data using Scheduling Inspector

    On Scheduling Inspector’s main dashboard, users will quickly be able to identify any Scheduled Searches that are potentially missing data. These searches with Coverage Gaps are not reviewing enough of the data in their time span when compared to their schedule. For instance, a search that is scheduled to run…

  • Understanding ES Helper

    ES Helper is purpose-built element focused on improving Enterprise Security deployments. Enterprise Security (ES) is a very expansive tool, and it brings in a lot of complexity that Admins may not have time to properly investigate and understand. With ES Helper, Admins will quickly know how well their Enterprise Security…