Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Splunk 7.x Quick Start Guide
  • Toc
  • feedback
Splunk 7.x Quick Start Guide

Splunk 7.x Quick Start Guide

By : James H. Baxter
5 (1)
close
Splunk 7.x Quick Start Guide

Splunk 7.x Quick Start Guide

5 (1)
By: James H. Baxter

Overview of this book

Splunk is a leading platform and solution for collecting, searching, and extracting value from ever increasing amounts of big data - and big data is eating the world! This book covers all the crucial Splunk topics and gives you the information and examples to get the immediate job done. You will find enough insights to support further research and use Splunk to suit any business environment or situation. Splunk 7.x Quick Start Guide gives you a thorough understanding of how Splunk works. You will learn about all the critical tasks for architecting, implementing, administering, and utilizing Splunk Enterprise to collect, store, retrieve, format, analyze, and visualize machine data. You will find step-by-step examples based on real-world experience and practical use cases that are applicable to all Splunk environments. There is a careful balance between adequate coverage of all the critical topics with short but relevant deep-dives into the configuration options and steps to carry out the day-to-day tasks that matter. By the end of the book, you will be a confident and proficient Splunk architect and administrator.
Table of Contents (12 chapters)
close

Advanced search commands

In some situations, you may need to utilize one of the more complex commands, such as sub-searches, join, or transaction. These commands allow you to handle dynamic events and values that would otherwise be difficult or impossible to do within a single search.

Subsearches

A subsearch is a search that runs within a primary, or outer, search, and is intended to return results to the primary/outer search to provide data that the primary search needs.

When a search contains a subsearch, the subsearch is run first. Subsearches must be enclosed in square brackets in the primary search, and the first term must be an event-generating command such as search, eventcount, or tstats (usually, you'll use search...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
bookmark search playlist download font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete