Implementing Splunk - Second Edition

A quick example

Once you have selected a data model (in our case Aviation Games), from the Select an object page, we can choose Processing Errors, which will land us on the New Pivot (Pivot Editor):

To build a simple pivot, we can take the following quick steps:

1. Add/verify the filters.

   Remember, All time is the default; this will include all results found over all time. You can click on the pencil and amend this filter to be based upon any of Splunk's Presets or a specific Date Range:

   

   For this example, we'll just leave the default selection.

2. Configure ...