courseoutline_metadesc.tpl

Splunk Power User Fast Start (POWER-U) – Details

Detaillierter Kursinhalt

Topic 1 – Working with Time
  • Formatting Time
  • Comparing Index Time versus Search Time
  • Using Time Commands
  • Working with Time Zones
Topic 2 – Statistical Processing
  • What is a Data Series?
  • Transforming Data
  • Manipulating Data with eval
  • Formatting Data
Topic 3 – Comparing Values
  • Using eval to Compare
  • Filtering with where
Topic 4 – Result Modification
  • Manipulating Output
  • Modifying Results Sets
  • Managing Missing Data
  • Modifying Field Values
  • Normalizing with eval
Topic 5 – Correlation Analysis
  • Calculate Co-Occurrence Between Fields
  • Analyze Multiple Datasets
Topic 6 – Intro to Knowledge Objects
  • What are Knowledge Objects?
  • Knowledge Object Settings
  • Managing Knowledge Objects
Topic 7 – Creating Knowledge Objects
  • Knowledge Objects and Search-time Operations
  • Creating Event Types
  • Using Event Type Builder
  • Creating Workflow Actions
  • Creating Tags and Aliases
  • Creating Search Macros
Topic 8 – Creating Field Extractions
  • Using the Field Extractor
  • Creating Regex Field Extractions
  • Creating Delimited Field Extractions
Topic 9 – Data Models
  • Introducing Data Model Datasets
  • Designing Data Models
  • Creating a Pivot
  • Accelerating Data Models