![]()
Splunk Operational Intelligence Cookbook
![]()
Table of Contents
Splunk Operational Intelligence Cookbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and more
Why subscribe?
Free access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. Play Time – Getting Data In
Introduction
Indexing files and directories
Getting ready
How to do it...
How it works...
There's more...
Adding a file or directory data input via the CLI
Adding a file or directory input via inputs.conf
One-time indexing of data files via the Splunk CLI
Indexing the Windows event logs
See also
Getting data through network ports
Getting ready
How to do it...
How it works...
There's more...
Adding a network input via the CLI
Adding a network input via inputs.conf
See also
Using scripted inputs
Getting ready
How to do it...
How it works...
See also
Using modular inputs
Getting ready
How to do it...
How it works...
There's more...
See also
Using the Universal Forwarder to gather data
Getting ready
How to do it...
How it works...
There's more...
Add the receiving indexer via outputs.conf
Loading the sample data for this book
Getting ready
How to do it...
How it works...
See also
Defining field extractions
Getting ready
How to do it...
How it works...
See also
Defining event types and tags
Getting ready
How to do it...
How it works...
There's more...
Adding event types and tags via eventtypes.conf and tags.conf
See also
Summary
2. Diving into Data – Search and Report
Introduction
Making raw event data readable
Getting ready
How to do it...
How it works...
There's more...
Tabulating every field
Removing fields, then tabulating everything else
Finding the most accessed web pages
Getting ready
How to do it...
How it works...
There's more...
Searching for the top 10 accessed web pages
Searching for the most accessed pages by user
See also
Finding the most used web browsers
Getting ready
How to do it...
How it works...
There's more…
Searching the web browser data for the most used OS types
See also
Identifying the top-referring websites
Getting ready
How to do it...
How it works...
There's more…
Searching for the top 10 referring websites using stats instead of top
See also
Charting web page response codes
Getting ready
How to do it...
How it works...
There's more...
Totaling success and error web page response codes
See also
Displaying web page response time statistics
Getting ready
How to do it...
How it works...
There's more...
Displaying web page response time by action
See also
Listing the top viewed products
Getting ready
How to do it...
How it works...
There's more...
Searching for the percentage of cart additions from product views
See also
Charting the application's functional performance
Getting ready
How to do it...
How it works...
There's more...
See also
Charting the application's memory usage
Getting ready
How to do it...
How it works...
See also
Counting the total number of database connections
Getting ready
How to do it...
How it works...
See also
Summary
3. Dashboards and Visualizations – Make Data Shine
Introduction
Creating an Operational Intelligence dashboard
Getting ready
How to do it...
How it works...
There's more...
Changing dashboard permissions
Using a pie chart to show the most accessed web pages
Getting ready
How to do it...
How it works...
There's more...
Searching for the top 10 accessed web pages
See also
Displaying the unique number of visitors
Getting ready
How to do it...
How it works...
There's more…
Adding labels to a single value panel
Coloring the value based on ranges
See also
Using a gauge to display the number of errors
Getting ready
How to do it...
How it works...
There's more…
See also
Charting the number of method requests by type and host
Getting ready
How to do it...
How it works...
S...
