Search icon
Subscription
0
Cart icon
Close icon
You have no products in your basket yet
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Implementing Splunk (Update)

You're reading from  Implementing Splunk (Update)

Product type Book
Published in Jul 2015
Publisher
ISBN-13 9781784391607
Pages 506 pages
Edition 1st Edition
Languages

Table of Contents (20) Chapters

Implementing Splunk Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
1. The Splunk Interface 2. Understanding Search 3. Tables, Charts, and Fields 4. Data Models and Pivots 5. Simple XML Dashboards 6. Advanced Search Examples 7. Extending Search 8. Working with Apps 9. Building Advanced Dashboards 10. Summary Indexes and CSV Files 11. Configuring Splunk 12. Advanced Deployments 13. Extending Splunk Index

A quick example


Once you have selected a data model (in our case Aviation Games), from the Select an object page, we can choose Processing Errors, which will land us on the New Pivot (Pivot Editor):

To build a simple pivot, we can take the following quick steps:

  1. Add/verify the filters.

    Remember, All time is the default; this will include all results found over all time. You can click on the pencil and amend this filter to be based upon any of Splunk's Presets or a specific Date Range:

    For this example, we'll just leave the default selection.

  2. Configure the Split Rows

    Directly under Filters is Split Rows. For Split Rows, I've selected date_month:

  3. After making the selection, you are able to provide additional settings for the selected row:

    I've provided a new name (Label) for the row (my_Month) and left the defaults for Sort, Max Rows (to display), and Totals.

  4. Configure the Split Columns

    Moving to the upper-right side of the Pivot page, we have Split Columns. For Split Columns, I've selected date_mday...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}