I use splunk a whole lot at work. As far as docs go they're not bad but sometimes you just gotta learn through comment sections. For questions that might not have a comment section, those answers are here