Splunk Operational Intelligence Cookbook
eBook - ePub

Splunk Operational Intelligence Cookbook

  1. 414 pages
  2. English
  3. ePUB (mobile friendly)
  4. Available on iOS & Android
eBook - ePub

Splunk Operational Intelligence Cookbook

About this book

This book contains over 70 practical, task-oriented recipes to build up your knowledge of Splunk's many features which you can apply to real-world operational intelligence scenarios.

Right from the first chapter, you will follow recipes that progressively build upon one another. The recipes provided will demonstrate methods to expedite delivery of intelligence reports and empower you to present data in a meaningful way through dashboards and by applying visualizations available in Splunk Enterprise. You will also delve deeply into your data with transactions, subsearching, concurrency, and more advanced search commands.

Tools to learn more effectively

Saving Books

Saving Books

Keyword Search

Keyword Search

Annotating Text

Annotating Text

Listen to it instead

Listen to it instead

Splunk Operational Intelligence Cookbook


Table of Contents

Splunk Operational Intelligence Cookbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and more
Why subscribe?
Free access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. Play Time – Getting Data In
Introduction
Indexing files and directories
Getting ready
How to do it...
How it works...
There's more...
Adding a file or directory data input via the CLI
Adding a file or directory input via inputs.conf
One-time indexing of data files via the Splunk CLI
Indexing the Windows event logs
See also
Getting data through network ports
Getting ready
How to do it...
How it works...
There's more...
Adding a network input via the CLI
Adding a network input via inputs.conf
See also
Using scripted inputs
Getting ready
How to do it...
How it works...
See also
Using modular inputs
Getting ready
How to do it...
How it works...
There's more...
See also
Using the Universal Forwarder to gather data
Getting ready
How to do it...
How it works...
There's more...
Add the receiving indexer via outputs.conf
Loading the sample data for this book
Getting ready
How to do it...
How it works...
See also
Defining field extractions
Getting ready
How to do it...
How it works...
See also
Defining event types and tags
Getting ready
How to do it...
How it works...
There's more...
Adding event types and tags via eventtypes.conf and tags.conf
See also
Summary
2. Diving into Data – Search and Report
Introduction
Making raw event data readable
Getting ready
How to do it...
How it works...
There's more...
Tabulating every field
Removing fields, then tabulating everything else
Finding the most accessed web pages
Getting ready
How to do it...
How it works...
There's more...
Searching for the top 10 accessed web pages
Searching for the most accessed pages by user
See also
Finding the most used web browsers
Getting ready
How to do it...
How it works...
There's more…
Searching the web browser data for the most used OS types
See also
Identifying the top-referring websites
Getting ready
How to do it...
How it works...
There's more…
Searching for the top 10 referring websites using stats instead of top
See also
Charting web page response codes
Getting ready
How to do it...
How it works...
There's more...
Totaling success and error web page response codes
See also
Displaying web page response time statistics
Getting ready
How to do it...
How it works...
There's more...
Displaying web page response time by action
See also
Listing the top viewed products
Getting ready
How to do it...
How it works...
There's more...
Searching for the percentage of cart additions from product views
See also
Charting the application's functional performance
Getting ready
How to do it...
How it works...
There's more...
See also
Charting the application's memory usage
Getting ready
How to do it...
How it works...
See also
Counting the total number of database connections
Getting ready
How to do it...
How it works...
See also
Summary
3. Dashboards and Visualizations – Make Data Shine
Introduction
Creating an Operational Intelligence dashboard
Getting ready
How to do it...
How it works...
There's more...
Changing dashboard permissions
Using a pie chart to show the most accessed web pages
Getting ready
How to do it...
How it works...
There's more...
Searching for the top 10 accessed web pages
See also
Displaying the unique number of visitors
Getting ready
How to do it...
How it works...
There's more…
Adding labels to a single value panel
Coloring the value based on ranges
See also
Using a gauge to display the number of errors
Getting ready
How to do it...
How it works...
There's more…
See also
Charting the number of method requests by type and host
Getting ready
How to do it...
How it works...
S...

Table of contents

  1. Splunk Operational Intelligence Cookbook

Frequently asked questions

Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription
No, books cannot be downloaded as external files, such as PDFs, for use outside of Perlego. However, you can download books within the Perlego app for offline reading on mobile or tablet. Learn how to download books offline
Perlego offers two plans: Essential and Complete
  • Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
  • Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Both plans are available with monthly, semester, or annual billing cycles.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 990+ topics, we’ve got you covered! Learn about our mission
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more about Read Aloud
Yes! You can use the Perlego app on both iOS and Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app
Yes, you can access Splunk Operational Intelligence Cookbook by Josh Diakun, Paul R Johnson, Derek Mock in PDF and/or ePUB format, as well as other popular books in Computer Science & Computer Science General. We have over one million books available in our catalogue for you to explore.