Search Hub Overview
Search Hub enables teams to achieve Search Governance in Splunk. It provides visibility into searches across your environment and enables automated governance to keep search usage efficient and aligned with best practices. Search Hub can be reached by Atlas users with access to the feature by selecting its icon on the side navigation bar.
Key Features
Search Hub Page
- Centralized dashboard to inspect searches in your environment.
- Review details such as ownership, scheduling, and performance impact.
- Identify problematic searches consuming disproportionate resources.
- Navigate to or reschedule searches quickly.
- Apply bulk actions such as bulk reschedule and auto-balancing when your role allows them.
- Use default views to quickly jump in and review searches.
Search Governance Automation
- Apply governance rules to flag searches based on usage, efficiency, or configuration.
- Automate remediation actions with auto-disable.
- Notify search owners when their searches are flagged and provide direct context for resolution.
Impact Page
- Track average Run Time or SVC Usage by scheduled searches.
- Show automated and manual actions taken in Atlas Search Hub against SVC consumption.
- Identify Run Time or SVC consumption trends in the environment.
Benefits
- Improves Splunk search efficiency by reducing resource-heavy or redundant searches.
- Reduces administrative overhead by automating governance actions.
- Provides visibility into search health and owner accountability.
Permissions
Search Hub respects Atlas role-based access control:
- Atlas Viewer: Can review searches they own, inspect governance results, and use supported single-search actions such as Fix Search on owned searches.
- Atlas Creator: Can review searches they have read access to, modify searches they have write access to, use bulk actions, and manage Search Governance rules.
- Atlas Admin: Full control over governance policies, remediation actions, bulk automation, and configuration settings.