I use splunk a whole lot at work. As far as docs go they're not bad but sometimes you just gotta learn trhough comment sections. For questions that might not have a comment section, those answers are here