The following table has a detailed view of each Element in the Atlas App Suite. Scroll down to the Version Table to see additional details. To view the version of your Atlas Platform, check the header on Atlas Core navigation bar. To view the version of a Atlas Element, while…
Data Utilization is the sister element of Data Management. While Data Management helps Admins and Users onboard and track live data feeds, Data Utilization tracks how the data itself is being utilized, and if data should be discontinued to save ingest space. Need to investigate if high ingest data is…
Using the Data Utilization element, Admins can create a starting point for analyzing what data could potentially be deprecated, and how much impact that will have on their Splunk Environment. This is an important part of the Splunk lifecycle for reducing Splunk license cost. Navigating to the Data Utilization dashboard…
On the Data Utilization Element, users will see the Utilization Report that lists all Index Sourcetype pairings found in the Splunk environment. The table provides columns to see how this data is currently being searched in three categories: Ad Hoc Queries This column shares the number of times this index…
Scheduling Inspector is the sister Element to Scheduling Assistant. While Scheduling Assistant helps you schedule your Scheduled Searches to reduce concurrency risk, Scheduling Inspector inspects your search configurations to ensure they meet best practices. These configurations include your search time spans and ownership. To use Scheduling Inspector to verify and…
Scheduling Inspector gives users the tools to re-assign Orphan Searches to new accounts. To start this process, go to the Orphaned Searches dashboard of the Scheduling Inspector Element A list of Orphan Searches, if there are any, will populate under the Inventory of Orphaned Reports. Orphan Searches are when previous…
On Scheduling Inspector’s main dashboard, users will quickly be able to identify any Scheduled Searches that have Wasteful Time Windows. These searches have overlapping time windows that are searching the same data more than once. For instance, a search that is scheduled to run every 15 minutes but looks at…
On Scheduling Inspector’s main dashboard, users will quickly be able to identify any Scheduled Searches that are potentially missing data. These searches with Coverage Gaps are not reviewing enough of the data in their time span when compared to their schedule. For instance, a search that is scheduled to run…
ES Helper is purpose-built element focused on improving Enterprise Security deployments. Enterprise Security (ES) is a very expansive tool, and it brings in a lot of complexity that Admins may not have time to properly investigate and understand. With ES Helper, Admins will quickly know how well their Enterprise Security…
On the Scheduling Activity dashboard of the Scheduling Assistant element, navigate down to the Concurrency Investigation Header. There will be two visuals that will help identify the source of concurrency issues Using the Cron Schedule Details Table This report enables users to sort by Concurrent Scheduling per Year or Average…