Splunk 7 Essentials - Third Edition

This is the code repository for Splunk 7 Essentials - Third Edition, published by Packt. It contains all the supporting project files necessary to work through the book from start to finish.

About the Book

Splunk is a search, reporting and analytics software platform for machine data, which has an ever-growing market adoption rate. More organizations than ever are adopting Splunk to make informed decisions in such areas as IT Operations, Information Security and the Internet of Things.

This book is for anyone who needs to get reports and analytics from machine data. The first two chapters of the book will quickly get you started with a simple Splunk installation and set up of a sample machine data generator, called Eventgen. You will then learn about searching machine data and enriching it with additional fields to provide analytical value. After this, you will learn to create various reports, dashboards, and alerts. You will also explore Splunk’s Pivot functionality to model data for business users,who can then create visualizations with point and click ease. You will also have the opportunity to test drive Splunk’s powerful HTTP Event Collector. After covering the core Splunk functionality, you'll be provided with some real-world best practices in using Splunk, and information on how to build upon what you’ve learned in this book to take Splunk to your organization.

Instructions and Navigation

All of the code is organized into folders. Each folder starts with a number followed by the application name. For example, Chapter02.

The code will look like the following:

{
    "time": 1519413100, // epoch time
    "host": "localhost",
    "source": "datasource",
    "sourcetype": "txt",
    "index": "main",
    "event": { "Hello world!" }
}

This book is for the beginners who want to get well versed in the services offered by Splunk 7. If you want to be a data/business analyst or a system administrator, this book is what you need. No prior knowledge of Splunk is required.

packtpublishing / splunk-7-essentials-third-edition Goto Github PK