Chapter 3. Mastering Tables, Charts, and Fields

This chapter will provide you with in-depth methods for leveraging Splunk tables, charts, and fields and also provide some working examples. The topics that will be covered in this chapter are:

  • Tables, charts, and fields
  • Drilldowns
  • Pivots
  • Sparklines

Tables, charts, and fields

After reading Chapter 2, Advanced Searching, you should know that when you run a Splunk search, your command pipeline determines which search result's tab (or tabs) will get populated. We know that if you are concentrating on retrieving events, your results will be returned in the Events tab, while event transformations will be visible in the Statistics and Visualization tabs.

In this chapter, we will cover the transformation of event ...

Get Mastering Splunk now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.