book

Data Analytics Using Splunk 9.x

by Dr. Nadine Shillingford

January 2023

Intermediate to advanced

336 pages

7h 43m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewers
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Splunking big dataHow is big data generated?Understanding SplunkExploring Splunk componentsForwardersIndexersSearch headsIntroducing the case study – splunking the  BOTS Dataset v1The setupSummary
Technical requirementsInstalling Splunk EnterpriseDeploying AWS EC2 instances with the Splunk Enterprise AMIDeploying AWS EC2 instances with the Windows Server 19 Base AMISetting up Splunk forwardersSetting up Splunk deployment serversSetting up Splunk indexersSetting up Splunk search headsInstalling additional Splunk add-ons and appsInstalling the BOTS Dataset v1 appManaging access to SplunkUsersSummary
Exploring inputs.conf using the Splunk Add-on for Microsoft WindowsUnderstanding the filesystem of a Splunk add-onExploring inputs.confExtracting fields using Splunk WebField aliasesCalculated fieldsField extractionsExtracting fields using props.conf and transforms.confCreating event types and taggingSummary
Understanding the Splunk search interfaceDissecting a Splunk queryFormatting and transforming dataSimple mathematical functionsSummary
Exploring more Splunk commandsStreaming commandsGenerating commandsTransforming commandsOrchestrating commandsDataset processing commandsjoinEnhancing logs with lookupsSimplifying Splunk searches with macrosSummary
Creating and formatting tablesCreating and formatting chartsCreating advanced chartsScatter plotsBubble chartsChoropleth mapsSummary

Adding tables and charts to dashboardsEditing a dashboard panelAdding inputs, tokens, and drilldownsCreating dropdown inputsAdding a time pickerExploring the dashboard sourceAdding reports and drilldowns to dashboardsExperimenting with the new Dashboard StudioSummary
Understanding Splunk indexing and bucketsExploring Splunk queuesParsingIndexingDiscussing Splunk licensing modelsConfiguring licensesSummary
Introducing Splunk clustersUnderstanding search head clustersConfiguring a search head clusterUnderstanding indexer clustersReplication factorConfiguring indexer clustersSummary
Understanding data modelsLookupsTable datasetsData model datasetsAccelerating data modelsUnderstanding the tstats commandExploring the Splunk CIM add-onImproving performanceSummary
Exploring multisite Splunk deploymentsSplunk Cloud PlatformMultisite search deploymentsHybrid searchConfiguring federated searchUsing federated searchSearching remote indexesSearching remote saved searchesSearching remote data modelsSummary
Understanding container managementDeploying Splunk in DockerGetting started with Splunk Operator for KubernetesExploring container logs using SplunkSummary
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Overview

Master the advanced tools of Splunk 9.x with this thoroughly detailed guide. You will learn how to set up and configure Splunk to process large-scale data analytics, create custom dashboards, and utilize advanced administration techniques. By the end of this book, you will have the knowledge to optimize and scale Splunk for maximum performance.

What this Book will help me do

Set up and configure Splunk 9.x in enterprise environments.
Create and optimize advanced dashboards using Splunk's Dashboard Studio.
Leverage performance tuning techniques to scale Splunk efficiently.
Enhance data organization via clustering, indexing, and advanced data modeling.
Integrate Splunk with Kubernetes to optimize CI/CD workflows.

Author(s)

Dr. Nadine Shillingford is a seasoned IT specialist with a PhD in Computer Science and extensive experience in analytics and software architecture. She is passionate about making complex technologies accessible and has a keen focus on practical applications of IT systems. Her goal with this book is to enable professionals to maximize Splunk's potential in real-world scenarios.

Who is it for?

This book is aimed at data analytics professionals and Splunk administrators who wish to deepen their expertise in using Splunk 9.x for robust data analyses. Readers should have a foundational understanding of Splunk concepts to fully benefit from the material. It's ideal for intermediate users looking to advance their skills and explore new features of Splunk 9.x. It is also useful for decision-makers who want to implement or manage enterprise-level Splunk solutions.