topic Is there a good book for learning Splunk queries? in Splunk Search

Is there a good book for learning Splunk queries?

cosmo360 — Thu, 04 Oct 2018 16:46:25 GMT

Hi,
Can someone suggest a good way (or a real good book) on how to learn splunk queries. any suggestions would be appreciated.

Thanks

Re: Is there a good book for learning Splunk queries?

Azeemering — Thu, 04 Oct 2018 17:04:05 GMT

https://www.splunk.com/pdfs/ebooks/exploring-splunk.pdf

Re: Is there a good book for learning Splunk queries?

brianMiller94 — Thu, 04 Oct 2018 17:07:46 GMT

I read these two books on amazon to get started:

Advanced Splunk
https://www.amazon.com/gp/product/1785884352/ref=oh_aui_search_detailpage?ie=UTF8&psc=1

Splunk Operational Intelligence Cookbook - Second Edition
https://www.amazon.com/gp/product/1785284991/ref=oh_aui_search_detailpage?ie=UTF8&psc=1

Thanks!

Re: Is there a good book for learning Splunk queries?

ChrisG — Thu, 04 Oct 2018 17:41:37 GMT

Here are some previous posts with good suggestions:

Re: Is there a good book for learning Splunk queries?

ppablo — Mon, 08 Oct 2018 21:22:00 GMT

This community-run site called GoSplunk is a pretty cool resource for people to check out Splunk searches contributed by other users. You should be able to get some ideas on how certain commands work and edit according to your own fields/values.
https://gosplunk.com/