Splunk Operational Intelligence Cookbook : Over 80 recipes for transforming your data into business-critical insights using Splunk, 3rd Edition.

This book demonstrates the power of Splunk 7.x to offer you quick solutions and strategies to bring efficient operational intelligence in your organization. Implement a wide range of tasks in recipe format to perform operations on machine data. Learn to achieve intelligent data-driven way using mach...

Full description

Saved in:
Bibliographic Details
Main Author: Mock, Derek
Other Authors: Diakun, Josh, R. Johnson, Paul
Format: eBook
Language:English
Published: Birmingham : Packt Publishing, 2018.
Edition:3rd ed.
Subjects:
Online Access:Click for online access
Table of Contents:
  • Cover; Title Page; Copyright and Credits; Packt Upsell; Contributors; Table of Contents; Preface; Chapter 1: Play Time
  • Getting Data In; Introduction; Indexing files and directories; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Adding a file or directory data input using the CLI; Adding a file or directory input using inputs.conf; One-time indexing of data files using the Splunk CLI; Indexing the Windows event logs; See also; Getting data through network ports; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Adding a network input using the CLI.
  • Adding a network input using inputs.confSee also; Using scripted inputs; Getting ready; How to do it ... ; How it works ... ; See also; Using modular inputs; Getting ready; How to do it ... ; How it works ... ; There's more ... ; See also; Using the Universal Forwarder to gather data; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Adding the receiving indexer via outputs.conf; Receiving data using the HTTP Event Collector; Getting ready; How to do it ... ; How it works ... ; Getting data from databases using DB Connect; Getting ready; How to do it ... ; How it works ...
  • Loading the sample data for this bookGetting ready; How to do it ... ; How it works ... ; See also; Data onboarding
  • defining field extractions; Getting ready; How to do it ... ; How it works ... ; See also; Data onboarding
  • defining event types and tags; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Adding event types and tags using eventtypes.conf and tags.conf; See also; Installing the Machine Learning Toolkit; Getting ready; How to do it ... ; How it works ... ; Chapter 2: Diving into Data
  • Search and Report; Introduction; The Search Processing Language ; Searching in Splunk.
  • Boolean operatorsCommon commands; Time modifiers; Working with fields; Saving searches in Splunk; Making raw event data readable; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Tabulating every field; Removing fields, then tabulating everything else; Finding the most accessed web pages; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Searching for the top 10 accessed web pages; Searching for the most accessed pages by user; See also; Finding the most used web browsers; Getting ready; How to do it ... ; How it works ... ; There's more ...
  • Searching for the web browser data for the most used OS typesSee also; Identifying the top-referring websites; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Searching for the top 10 using stats instead of top; See also; Charting web page response codes; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Totaling success and error web page response codes; See also; Displaying web page response time statistics; Getting ready; How to do it ... ; How it works ... ; There's more ... ; Displaying web page response time by action; See also.