Mastering Splunk

Conventions

In this book, you will find a number of styles of text that distinguish between different kinds of information. Here are some examples of these styles, and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: "The first step is editing the transforms.conf configuration file to add the new lookup reference."

A block of code is set as follows:

[subsearch]
maxout = 250
maxtime = 120
ttl = 400

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

lookup BUtoBUName BU as "Business Unit" OUTPUT BUName as "Business Unit Name" | Table Month, ...