What this book covers
Chapter 1, The Splunk Interface, walks you through the most common elements in the Splunk interface.
Chapter 2, Understanding Search, dives into the nuts and bolts of how searching works so that you can make efficient searches to populate the cool reports.
Chapter 3, Tables, Charts, and Fields, starts using fields for more than searches; we'll build tables and graphs. Then we'll learn how to make our own fields.
Chapter 4, Data Models and Pivots, covers data models and pivots, the pivot editor, pivot elements and filters, and sparklines.
Chapter 5, Simple XML Dashboards, demonstrates simple XML dashboards; their purpose; using wizards to build, schedule the generation of, and edit XML directly; and building forms.
Chapter 6, Advanced Search Examples, dives into advanced search examples, which can be a lot of fun. We'll expose some really powerful features of the search language and go over a few tricks that I've learned over the years.
Chapter 7, Extending Search, uses more advanced features of Splunk to help extend the search language and enrich data at search time.
Chapter 8, Working with Apps, explores what makes up a Splunk app, as well as the latest self-service app management (originally introduced in version 6.6) updated in version 7.0.
Chapter 9, Building Advanced Dashboards, covers module nesting, layoutPanel, intentions, and an alternative to intentions with SideView Utils.
Chapter 10, Summary Indexes and CSV Files, explores the use of summary indexes and the commands surrounding them.
Chapter 11, Configuring Splunk, overviews how configurations work and gives a commentary on the most common aspects of Splunk configuration.
Chapter 12, Advanced Deployments, digs into distributed deployments and looks at how they are efficiently configured.
Chapter 13, Extending Splunk, shows a number of ways in which Splunk can be extended to input, manipulate, and output events.
Chapter 14, Machine Learning Toolkit, overviews the fundamentals of Splunk's Machine Learning Toolkit and shows how it can be used to create a machine learning model.