Splunk Operational Intelligence Cookbook - Second Edition
eBook - ePub

Splunk Operational Intelligence Cookbook - Second Edition

  1. 436 pages
  2. English
  3. ePUB (mobile friendly)
  4. Available on iOS & Android
eBook - ePub

Splunk Operational Intelligence Cookbook - Second Edition

About this book

Over 70 practical recipes to gain operational data intelligence with Splunk Enterprise

About This Book

  • This is the most up-to-date book on Splunk 6.3 and teaches you how to tackle real-world operational intelligence scenarios efficiently
  • Get business insights using machine data using this easy-to-follow guide
  • Search, monitor, and analyze your operational data skillfully using this recipe-based, practical guide

Who This Book Is For

This book is intended for users of all levels who are looking to leverage the Splunk Enterprise platform as a valuable operational intelligence tool. The recipes provided in this book will appeal to individuals from all facets of business, IT, security, product, marketing, and many more!

Also, existing users of Splunk who want to upgrade and get up and running with Splunk 6.3 will find this book invaluable.

What You Will Learn

  • Use Splunk to gather, analyze, and report on data
  • Create dashboards and visualizations that make data meaningful
  • Build an operational intelligence application with extensive features and functionality
  • Enrich operational data with lookups and workflows
  • Model and accelerate data and perform pivot-based reporting
  • Build real-time, scripted, and other intelligence-driven alerts
  • Summarize data for longer term trending, reporting, and analysis
  • Integrate advanced JavaScript charts and leverage Splunk's API

In Detail

Splunk makes it easy for you to take control of your data, and with Splunk Operational Cookbook, you can be confident that you are taking advantage of the Big Data revolution and driving your business with the cutting edge of operational intelligence and business analytics.

With more than 70 recipes that demonstrate all of Splunk's features, not only will you find quick solutions to common problems, but you'll also learn a wide range of strategies and uncover new ideas that will make you rethink what operational intelligence means to you and your organization.

You'll discover recipes on data processing, searching and reporting, dashboards, and visualizations to make data shareable, communicable, and most importantly meaningful. You'll also find step-by-step demonstrations that walk you through building an operational intelligence application containing vital features essential to understanding data and to help you successfully integrate a data-driven way of thinking in your organization.

Throughout the book, you'll dive deeper into Splunk, explore data models and pivots to extend your intelligence capabilities, and perform advanced searching to explore your data in even more sophisticated ways. Splunk is changing the business landscape, so make sure you're taking advantage of it.

Style and approach

Splunk is an excellent platform that allows you to make sense of machine data with ease. The adoption of Splunk has been huge and everyone who has gone beyond installing Splunk wants to know how to make most of it. This book will not only teach you how to use Splunk in real-world scenarios to get business insights, but will also get existing Splunk users up to date with the latest Splunk 6.3 release.

Tools to learn more effectively

Saving Books

Saving Books

Keyword Search

Keyword Search

Annotating Text

Annotating Text

Listen to it instead

Listen to it instead

Information

Splunk Operational Intelligence Cookbook Second Edition


Table of Contents

Splunk Operational Intelligence Cookbook Second Edition
Credits
About the Authors
About the Reviewer
www.PacktPub.com
eBooks, discount offers, and more
Why subscribe?
Instant updates on new Packt books
Preface
What this book covers
What you need for this book
Who this book is for
Sections
Getting ready
How to do it…
How it works…
There's more…
See also
Conventions
Reader feedback
Customer support
Downloading the example code
Downloading the color images of this book
Errata
Piracy
Questions
1. Play Time – Getting Data In
Introduction
Indexing files and directories
Getting ready
How to do it…
How it works…
There's more…
Adding a file or directory data input via the CLI
Adding a file or directory input via inputs.conf
One-time indexing of data files via the Splunk CLI
Indexing the Windows event logs
See also
Getting data through network ports
Getting ready
How to do it…
How it works…
There's more…
Adding a network input via the CLI
Adding a network input via inputs.conf
See also
Using scripted inputs
Getting ready
How to do it…
How it works…
See also
Using modular inputs
Getting ready
How to do it…
How it works…
There's more…
See also
Using the Universal Forwarder to gather data
Getting ready
How to do it…
How it works…
There's more…
Add the receiving indexer via outputs.conf
Loading the sample data for this book
Getting ready
How to do it…
How it works…
See also
Defining field extractions
Getting ready
How to do it…
How it works…
See also
Defining event types and tags
Getting ready
How to do it…
How it works…
There's more…
Adding event types and tags via eventtypes.conf and tags.conf
See also
2. Diving into Data – Search and Report
Introduction
Making raw event data readable
Getting ready
How to do it…
How it works…
There's more…
Tabulating every field
Removing fields, then tabulating everything else
Finding the most accessed web pages
Getting ready
How to do it…
How it works…
There's more…
Searching for the top 10 accessed web pages
Searching for the most accessed pages by user
See also
Finding the most used web browsers
Getting ready
How to do it…
How it works…
There's more…
Searching for the web browser data for the most used OS types
See also
Identifying the top-referring websites
Getting ready
How to do it…
How it works…
There's more…
Searching for the top 10 using stats instead of top
See also
Charting web page response codes
Getting ready
How to do it…
How it works…
There's more…
Totaling success and error web page response codes
See also
Displaying web page response time statistics
Getting ready
How to do it…
How it works…
There's more…
Displaying web page response time by action
See also
Listing the top viewed products
Getting ready
How to do it…
How it works…
There's more…
Searching for the percentage of cart additions from product views
See also
Charting the application's functional performance
Getting ready
How to do it…
How it works…
There's more…
See also
Charting the application's memory usage
Getting ready
How to do it…
How it works…
See also
Counting the total number of database connections
Getting ready
How to do it…
How it works…
See also
3. Dashboards and Visualizations – Making Data Shine
Introduction
Creating an Operational Intelligence dashboard
Getting ready
How to do it…
How it works…
There's more…
Changing dashboard permissions
Using a pie chart to show the most accessed web pages
Getting ready
How to do it…
How it works…
There's more…
Searching for the top 10 accessed web pages
See also
Displaying the unique number of visitors
Getting ready
How to do it…
How it works…
There's more…
Coloring the value based on ranges
Adding trends and sparklines to the values
See also
Using a gauge to display the number of errors
Getting ready
How to do it…
How it works…
There's more…
See also
Charting the number of method requests by type and host
Getting ready
How to do it…
How it works…
See also
Creating a timechart of method requests, vie...

Table of contents

  1. Splunk Operational Intelligence Cookbook Second Edition

Frequently asked questions

Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription
No, books cannot be downloaded as external files, such as PDFs, for use outside of Perlego. However, you can download books within the Perlego app for offline reading on mobile or tablet. Learn how to download books offline
Perlego offers two plans: Essential and Complete
  • Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
  • Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Both plans are available with monthly, semester, or annual billing cycles.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 990+ topics, we’ve got you covered! Learn about our mission
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more about Read Aloud
Yes! You can use the Perlego app on both iOS and Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app
Yes, you can access Splunk Operational Intelligence Cookbook - Second Edition by Josh Diakun, Paul R Johnson, Derek Mock in PDF and/or ePUB format, as well as other popular books in Computer Science & Data Processing. We have over one million books available in our catalogue for you to explore.