16 docs tagged with "Splunk®"

Compare Lumi roles to Splunk roles

Learn how predefined roles in Splunk® compare to Imply Lumi roles. Discover how roles align and how to map user access between platforms.

Federated search examples

Learn how to query Imply Lumi events from Splunk® using federated search. Explore SPL command examples with filters, aggregations, and analysis.

How to convert a Splunk dashboard for federated search

Learn how to clone a Splunk® dashboard and convert it to use federated queries against Imply Lumi. Compare results between dashboards.

How to send events with an S3 ingest action

Learn how to send events from Splunk® to Imply Lumi using S3 ingest actions. Follow step-by-step instructions to route and preview your data in Lumi.

How to send Windows event logs with S3 routing

Learn how to process Windows event logs with Imply Lumi using Splunk® forwarders and S3 routing.

Known limitations

Learn about Imply Lumi's current limitations for event search, data ingestion, and federated queries to optimize your implementation and avoid issues.

Lumi concepts for Splunk users

Learn how Imply Lumi integrates with Splunk® for observability. Discover key concepts for data ingestion, forwarding, and search compatibility.

Monitor federated search performance

Learn how to use the Splunk® job inspector to troubleshoot federated queries of Imply Lumi events with Lumi-specific components and tools.

Query Lumi events with data models

Learn how Imply Lumi integrates with Splunk® data models. Learn setup requirements, field mapping, and query configuration for federated search.

S2S event parsing reference

Learn how to configure Imply Lumi event parsing settings for Splunk®-to-Splunk protocol. Discover timestamp handling and line breaking options.

Send events with S2S

Learn how to forward events from Splunk® universal or heavy forwarders to Imply Lumi using the S2S protocol over TCP or HTTP connections.

Send events with S3 ingest actions

Learn how to send events to Imply Lumi using Splunk® ingest actions. Route data through S3 for seamless integration with heavy forwarders.

Send events with Splunk HEC

Learn how to send events to Imply Lumi using the Splunk® HTTP event collector. Configure HEC forwarding with OTel or curl for seamless integration.

Set up Splunk standard federated search

Learn how to configure standard mode federated search to query Imply Lumi events directly from Splunk® using SPL.

Set up Splunk transparent federated search

Learn how to configure Imply Lumi transparent mode federated search in Splunk®, allowing you to query Lumi events using Splunk data models.

Splunk federated search reference

Learn which SPL commands and functions Imply Lumi supports for federated search with Splunk®. Discover syntax, operators, and query examples.