Splunk's main claim to fame is that it's schema-free, or, as they like to call it, "scheme on-the-fly"
IOW: Splunk doesn't need you to rigorously define every possible field ahead of time – it's optimized to allow field extraction and creation at search time
February 14, 2020 at 01:35PM
via reddit https://www.reddit.com/r/Splunk/comments/f3g8an/splunk_certs/fhlvq0f?utm_source=ifttt