Mastering Splunk : optimize your machine-generated data effectively by developing advanced analytics with Splunk / James Miller.
Annotation.
Saved in:
| Online Access: |
Full Text (via O'Reilly/Safari) |
|---|---|
| Main Author: | |
| Format: | eBook |
| Language: | English |
| Published: |
Birmingham, UK :
Packt Publishing,
2014.
|
| Series: | Professional expertise distilled.
|
| Subjects: |
Table of Contents:
- Cover; Copyright; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: The Application of Splunk; The definition of Splunk; Keeping it simple; Universal file handling; Confidentiality and security; The evolution of Splunk; The Splunk approach; Conventional use cases; Investigational searching; Searching with pivot; The event timeline; Monitoring; Alerting; Reporting; Visibility in the operational world; Operational intelligence; A technology-agnostic approach; Decision support
- analysis in real time; ETL analytics and preconceptions
- The complements of SplunkODBC; Splunk
- outside the box; Customer Relationship Management; Emerging technologies; Knowledge discovery and data mining; Disaster recovery; Virus protection; The enhancement of structured data; Project management; Firewall applications; Enterprise wireless solutions; Hadoop technologies; Media measurement; Social media; Geographical Information Systems; Mobile Device Management; Splunk in action; Summary; Chapter 2: Advanced Searching; Searching in Splunk; The search dashboard; The new search dashboard; The Splunk search mechanism
- The Splunk quick reference guidePlease assist me, let me go; Basic optimization; Fast, verbose, or smart?; The breakdown of commands; Understanding the difference between sparse and dense; Searching for operators, command formats, and tags; The process flow; Boolean expressions; You can quote me, I'm escaping; Tag me Splunk!; Assigning a search tag; Tagging field-value pairs; Wild tags!; Disabling and deleting tags; Transactional searching; Knowledge management; Some working examples; Subsearching; Output settings for subsearches; Search Job Inspector; Searching with parameters
- The eval statementA simple example; Splunk macros; Creating your own macro; Using your macros; The limitations of Splunk; Search results; Some basic Splunk search examples; Additional formatting; Summary; Chapter 3: Mastering Tables, Charts, and Fields; Tables, charts, and fields; Splunking into tables; The table command; The Splunk rename command; Limits; Fields; An example of the fields command; Returning search results as charts; The chart command; The split-by fields; The where clause; More visualization examples; Some additional functions; Splunk bucketing
- Reporting using the timechart commandArguments required by the timechart command; Bucket time spans versus per_* functions; Drilldowns; The drilldown options; The basic drilldown functionality; Row drilldowns; Cell drilldowns; Chart drilldowns; Legends; Pivot; The pivot editor; Working with pivot elements; Filtering your pivots; Split; Column values; Pivot table formatting; A quick example; Sparklines; Summary; Chapter 4: Lookups; Introduction; Configuring a simple field lookup; Defining lookups in Splunk Web; Automatic lookups; The Add new page; Configuration files
- Implementing a lookup using configuration files
- an example