O'Reilly logo

Splunk 7 Essentials - Third Edition by Betsy Page Sigman, Erickson Delgado, J-P Contreras

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Adding attributes to objects

There are different ways to add an attribute to an object. In this book, we will utilize extracted attributes based on fields and regular expressions. Go ahead and carry out these steps:

  1. Click on the Add Field dropdown and select Auto-Extracted.
  2. Scroll down the list of auto-extracted fields and select the fields that we have manually extracted in Chapter 2, Bringing in Data, as listed and shown in the bullet list, followed by the screenshot:
    • http_method
    • http_response_time
    • http_status_code
    • http_uri
    • http_user_agent
  1. If you look closely, you'll see Splunk has automatically classified the attributes based on assumed ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required