O'Reilly logo

Implementing Splunk - Second Edition by James D Miller, Vincent Bumgarner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 7. Extending Search

In this chapter, we will look at some of the features that Splunk provides beyond its already powerful search language. We will cover the following, along with the help of examples:

  • Tags and event types that help you categorize events, for both search and reporting
  • Lookups that allow you to add external fields to events as though they were part of the original data
  • Macros that let you reuse snippets of search in powerful ways
  • Workflow actions that let you build searches and links based on the field values in an event
  • External commands that allow you to use Python code to work with search results

In this chapter, we will investigate a few of the many commands included in Splunk. We will write our own commands in Chapter 13 ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required