Skip to main content
Version: Atlas v5.1

Search Hub Overview

Search Hub enables teams to achieve Search Governance in Splunk. It provides visibility into searches across your environment and enables automated governance to keep search usage efficient and aligned with best practices. Search Hub can be reached by Atlas users with access to the feature by selecting its icon on the side navigation bar.

Key Features​

Search Hub Page​

  • Centralized dashboard to inspect searches in your environment.
  • Review details such as ownership, scheduling, and performance impact.
  • Identify problematic searches consuming disproportionate resources.
  • Navigate to or reschedule searches quickly.
  • Apply bulk actions such as bulk reschedule and auto-balancing when your role allows them.
  • Send bulk email reports for selected scheduled searches to designated recipients and, when needed, their search owners.
  • Bulk delete eligible locally defined saved searches when you have the Atlas Admin role.
  • Use default views to quickly jump in and review searches.

Search Governance Automation​

  • Apply governance rules to flag searches based on usage, efficiency, or configuration.
  • Automate remediation actions with auto-disable.
  • Notify search owners when their searches are flagged and provide direct context for resolution.

Impact Page​

  • Track average Run Time or SVC Usage by scheduled searches.
  • Show automated and manual actions taken in Atlas Search Hub against SVC consumption.
  • Identify Run Time or SVC consumption trends in the environment.

Benefits​

  • Improves Splunk search efficiency by reducing resource-heavy or redundant searches.
  • Reduces administrative overhead by automating governance actions.
  • Provides visibility into search health and owner accountability.
  • Makes it easier to share search governance status with relevant stakeholders.

Permissions​

Search Hub respects Atlas role-based access control:

  • Atlas Viewer: Can review searches they own, inspect governance results, and use supported single-search actions such as Fix Search on owned searches.
  • Atlas Creator: Can review searches they have read access to, modify searches they have write access to, use bulk actions including email reporting, and manage Search Governance rules.
  • Atlas Admin: Full control over governance policies, remediation actions, bulk automation including email reporting and deletion of eligible local saved searches, and configuration settings.