Practical Splunk Search Processing Language: A Guide for Mastering SPL Commands for Maximum Efficiency and Outcome
Original price was: $44.99.$31.72Current price is: $31.72.
Price: [price_with_discount]
(as of [price_update_date] – Details)
[ad_1]
Use this practical guide to the Splunk operational data intelligence platform to search, visualize, and analyze petabyte-scale, unstructured machine data. Get to the heart of the platform and use the Search Processing Language (SPL) tool to query the platform to find the answers you need.
With more than 140 commands, SPL gives you the power to ask any question of machine data. However, many users (both newbies and experienced users) find the language difficult to grasp and complex. This book takes you through the basics of SPL using plenty of hands-on examples and emphasizes the most impactful SPL commands (such as eval, stats, and timechart). You will understand the most efficient ways to query Splunk (such as learning the drawbacks of subsearches and join, and why it makes sense to use tstats). You will be introduced to lesser-known commands that can be very useful, such as using the command rex to extract fieldsand erex to generate regular expressions automatically.
In addition, you will learn how to create basic visualizations (such as charts and tables) and use prescriptive guidance on search optimization. For those ready to take it to the next level, the author introduces advanced commands such as predict, kmeans, and cluster.
What You Will LearnUse real-world scenarios (such as analyzing a web access log) to search, group, correlate, and create reports using SPL commandsEnhance your search results using lookups and create new lookup tables using SPL commandsExtract fields from your search resultsCompare data from multiple time frames in one chart (such as comparing your current day application performance to the average of the past 30 days)Analyze the performance of your search using Job Inspector and identify execution costs of various components of your search
Who This Book Is For
Application developers, architects, DevOps engineers, application support engineers, network operations center analysts, security operations center (SOC) analysts, and cyber security professionals who use Splunk to search and analyze their machine data
Publisher : Apress; 1st ed. edition (November 24, 2020)
Language : English
Paperback : 292 pages
ISBN-10 : 1484262751
ISBN-13 : 978-1484262757
Item Weight : 1.13 pounds
Dimensions : 7.01 x 0.66 x 10 inches
[ad_2]
6 reviews for Practical Splunk Search Processing Language: A Guide for Mastering SPL Commands for Maximum Efficiency and Outcome
Add a review
Related Products
Expert Data Modeling with Power BI – Second Edition: Enrich and optimize your data models to get the best out of Power BI for reporting and business needs
Miguel Brownne –
Good coverage for beginning SPL
Clear and concise. I’ve used this book with the author’s O’Reilly course. He explains concepts . . . clearly and concisely. Very helpful. In a couple of months, I’ve gone from zero Splunk knowledge to using it routinely at work.
Scott Smith –
Good book
Not disappointed
Ron Grundy –
Great book
Great book. Exactly what I was looking for.
J. Rice –
This is a good spunk book. Iâve read several now and this one stood out.
This book is straight to the point. Many examples that seemed worthwhile.
Donneaka Leath –
Great Book
Very informative
Gunnar B. Podolec –
Waste of money
So if you are trying to learn Splunk there are much better books out there. If you already know Splunk this isnât bringing anything new. I really donât know the target audience or what they thought they were informing any one on.