Indexing Insights

The Indexing Insights app provides insights into your event indexing with the focus on discovering anomalous behavior. This app consists of a number of saved searches that summarize information about your Splunk environment, and a dashboard to explore the summarized data. The main features of this app are as follows. * Visualizations to see how much data has been indexed for a given day compared to the past. * Visualizations to see the count of indexed events for a given day compared to the past. * The ability to drill down to explore the hosts where anomalous behavior might be occurring.