Skip to main content
Version: Atlas v4.4

Search Hub Overview

Search Hub enables Admins to achieve Search Governance in Splunk. It provides visibility into searches across your environment and enables automated governance to keep search usage efficient and aligned with best practices. Search Hub can be reached by licensed Atlas users by selecting its icon on the side navigation bar.

Key Features​

Search Hub Page​

  • Centralized dashboard to inspect searches in your environment.
  • Review details such as ownership, scheduling, and performance impact.
  • Identify problematic searches consuming disproportionate resources.
  • Navigate to or reschedule searches quickly.
  • Apply bulk actions such as bulk reschedule and auto-balancing.
  • Use default views to quickly jump in and review searches.

Search Governance Automation​

  • Apply governance rules to flag searches based on usage, efficiency, or configuration.
  • Automate remediation actions with auto-disable.
  • Notify search owners when their searches are flagged and provide direct context for resolution.

Impact Page​

  • Track average Run Time or SVC Usage by scheduled searches.
  • Show automated and manual actions taken in Atlas Search Hub against SVC consumption.
  • Identify Run Time or SVC consumption trends in the environment.

Benefits​

  • Improves Splunk search efficiency by reducing resource-heavy or redundant searches.
  • Reduces administrative overhead by automating governance actions.
  • Provides visibility into search health and owner accountability.

Permissions​

Search Hub respects Atlas role-based access control:

  • Atlas Viewer: Visibility into search activity and searches of searches they can configure.
  • Atlas Creator: Additional ability to create and enable/disable Search Governance rules.
  • Atlas Admin: Full control over governance policies, remediation actions, and configuration settings. Can turn Search Governance automation on or off.