Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Advanced Splunk

You're reading from  Advanced Splunk

Product type Book
Published in Jun 2016
Publisher
ISBN-13 9781785884351
Pages 348 pages
Edition 1st Edition
Languages
Author (1):
Ashish Kumar Tulsiram Yadav Ashish Kumar Tulsiram Yadav
Profile icon Ashish Kumar Tulsiram Yadav

Table of Contents (20) Chapters

Advanced Splunk
Credits
About the Author
Acknowledgements
About the Reviewer
www.PacktPub.com
Preface
1. What's New in Splunk 6.3? 2. Developing an Application on Splunk 3. On-boarding Data in Splunk 4. Data Analytics 5. Advanced Data Analytics 6. Visualization 7. Advanced Visualization 8. Dashboard Customization 9. Advanced Dashboard Customization 10. Tweaking Splunk 11. Enterprise Integration with Splunk 12. What Next? Splunk 6.4 Index

Time


The time subset of commands is used to enrich the data with the ability to search based on time and make data more user friendly for analytics and visualization.

The reltime command

The reltime Splunk command is used to create a relative time field called reltime. It shows the time value in a format that humans can read, relative to current time. The time in reltime would appear as 2 hours ago, 3 days ago, 1 month ago, and so on.

The syntax for the reltime command is as follows:

… | reltime

Refer to the following example for better clarity:

index=_internal |reltime

As shown in the preceding screenshot, reltime creates a more user friendly and human readable format output of relative time, which can be used in analytics and visualizations.

The localize command

The localize command is used to create a list of time ranges in which the results have occurred.

The syntax for the localize command is as follows:

localize maxpause

The maxpause parameter can be used to specify the maximum time between...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €14.99/month. Cancel anytime}