What this book covers

Chapter 1, Splunk – Getting Started, covers concepts to extend Splunk to your organization. We cover the vast Splunk community and online ecosystem.

Chapter 2, Bringing in Data, teaches essential concepts such as forwarders, indexes, events, event types, fields, sources, and sourcetypes.

Chapter 3, Search Processing Language, covers more about using search and other commands to analyze your data.

Chapter 4, Reporting, Alerts, and Search Optimization, shows how to classify your data using Event Types, enrich it using Lookups, and normalize it using Tags.

Chapter 5, Dynamic Dashboarding, creates a fully functional form-based dashboard that will allow you to change the inputs and affect the dashboard data by using tokens and assigning them to search panels.

Chapter 6, Data Models and Pivot, uses a very intuitive Pivot editor to create three different visualizations: area chart, pie chart, and single value with a trend sparkline.

Chapter 7, HTTP Event Collector, discusses HTTP event collector (HEC) and how it can be used to send data directly from an application to Splunk.

Chapter 8, Best Practices and Advanced Queries, introduces a few extra skills that will help make you a powerful Splunker.

Chapter 9, Taking Splunk to the Organization, concludes our book with thoughts, concepts, and ideas to take this new knowledge ahead and apply to an organization.