Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Splunk 7.x Quick Start Guide

By : James H. Baxter

5 (1)

Splunk 7.x Quick Start Guide

5 (1)

By: James H. Baxter

Overview of this book

Splunk is a leading platform and solution for collecting, searching, and extracting value from ever increasing amounts of big data - and big data is eating the world! This book covers all the crucial Splunk topics and gives you the information and examples to get the immediate job done. You will find enough insights to support further research and use Splunk to suit any business environment or situation. Splunk 7.x Quick Start Guide gives you a thorough understanding of how Splunk works. You will learn about all the critical tasks for architecting, implementing, administering, and utilizing Splunk Enterprise to collect, store, retrieve, format, analyze, and visualize machine data. You will find step-by-step examples based on real-world experience and practical use cases that are applicable to all Splunk environments. There is a careful balance between adequate coverage of all the critical topics with short but relevant deep-dives into the configuration options and steps to carry out the day-to-day tasks that matter. By the end of the book, you will be a confident and proficient Splunk architect and administrator.

Preface

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

Introduction to Splunk

Introduction to Splunk

What is Splunk?

Installing Splunk for free

Splunk components

Splunk processing tiers

Splunk events

Splunk information resources

Summary

Architecting Splunk

Architecting Splunk

Selecting a Splunk configuration

Selecting Splunk hardware options

Summary

Installing and Configuring Splunk

Installing and Configuring Splunk

Installing Splunk Enterprise

Configuring Splunk components

Documenting your Splunk deployment

Summary

Getting Data into Splunk

Getting Data into Splunk

Installing Splunk universal forwarder

Setting up a heavy forwarder

Configuring other data source inputs

Configuring an HTTP Event Collector

Introduction to apps

Using the deployment server

Managing Splunk Indexes

Splunk sourcetypes

Using the cluster master

Summary

Administering Splunk Apps and Users

Administering Splunk Apps and Users

Using the deployer

Configuring users and roles

Best practices for administering Splunk

Supporting your Splunk Deployment

Summary

Searching with Splunk

Searching with Splunk

The Splunk Web interface

Creating Splunk searches

Visualizing search results

Advanced search commands

Summary

Splunk Knowledge Objects

Splunk Knowledge Objects

Field extractions

Other knowledge objects

Summary

Splunk Reports, Dashboards, and Alerts

Splunk Reports, Dashboards, and Alerts

Introduction

Creating reports

Creating a dashboard

Creating an alert

Summary

Splunk Applications

Splunk Applications

Splunk apps and add-ons

Creating a Splunk app

Using Splunkbase

Splunk DB Connect

Splunk Premium apps

Summary

Advanced Splunk

Advanced Splunk

Troubleshooting Splunk

Performance and capacity

REST API endpoints

Splunk Monitoring Console

Splunk development

Additional study topics

Summary

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

5 (1)

5 star

100%

4 star

0

3 star

0

2 star

0

1 star

0

Installing and Configuring Splunk

Now that we've made our hardware decisions and have a handful of shiny new servers just waiting for something to do, let's install Splunk Enterprise on them!

The topics we'll cover in this chapter include the following:

How to install Splunk Enterprise on Linux and Windows platforms
Becoming familiar with Splunk's directory structure
Understanding Splunk's configuration file precedence and how it affects option settings
How to configure each Splunk component to perform its specific function
Using a checklist to ensure that a Splunk environment is properly configured
Implementing Splunk in multiple environments—zones and cross-environment search
How to document a Splunk solution

There's a lot to do, so let's get started!

Search

Your notes and bookmarks