Casebook · Splunk
Map your Splunk indexes to Casebook's data categories. This lets us render SPL against your environment — not generic templates.
Splunk not connected
You can still define mappings now — they activate once Splunk is connected.
What the categories mean