Skip to main content
Version: Atlas v4.2

Search Hub Overview

Search Hub enables Admins to achieve Search Governance in Splunk. It provides visibility into searches across your environment and enables automated governance to keep search usage efficient and aligned with best practices.

Key Features

Search Hub Page

  • Centralized dashboard to inspect searches in your environment.
  • Review details such as ownership, scheduling, and performance impact.
  • Identify problematic searches consuming disproportionate resources.
  • Quickly navigate to or reschedule searches.

Search Governance Automation

  • Apply governance rules to flag searches based on usage, efficiency, or configuration.
  • Automate remediation actions with auto-disable.
  • Notify search owners when their searches are flagged and provide direct context for resolution.

Benefits

  • Improves Splunk search efficiency by reducing resource-heavy or redundant searches.
  • Reduces administrative overhead by automating governance actions.
  • Provides transparency into search health and accountability for search owners.

Permissions

Search Hub respects Atlas role-based access control:

  • Atlas Viewer: Visibility into search activity and searches of searches they can configure.
  • Atlas Creator: Additional ability to create and enable/disable Search Governance rules.
  • Atlas Admin: Full control over governance policies, remediation actions, and configuration settings. Can turn Search Governance automation on or off.