Blog

Awesome, I was able to move from those 2 slides that took a lot of content and energy

Splunk can be installed in Windows and Linux for Production environments, there are some tweaks that you can

Getting back from where we left over from yesterday. Here is a quick and interesting view of the

As I continue being exposed to Splunk in the wild as well as in class 🙂 – I

Introduction to Knowledge objects These are tools you use to discover and analyze various aspects of your data

Introduction to Transactions A transaction is a group of related events that span time. Events can come from

Introduction to Eval Commands The eval commands are great to perform calculations, convert values, road values, format values

Visualizations When a search returns statistical values, the results can be viewed with different visualization types, some of

SO we got to this point, looking at the Fundamentals 2 section of my training. This training builds

Fields are searchable key/value pairs in your event data Fields can be searched by their name, for example:

Every search is also a job, which can be paused, stopped, saved and exported. Here are some interesting

Basic search The search assistant provides a nice way to begin looking up for something in particular. At

Splunk Index Time Process Data ingestion for Splunk is broken down into 3 different phases Input Phase –

Addition Splunk Components There are additional components for a Splunk deployment, here is a list Deployment Server Cluster

Splunk – Indexer This is the engine that is in charge of processing machine data, stores the results

What is Splunk Splunk is many things to different groups in an organization, but mostly is an engine