https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478012#M192802 <P>Really you have 3 terms <CODE>event</CODE>, <CODE>log</CODE>, and <CODE>result</CODE>.</P> <P>An <CODE>event</CODE> is a thing that happened anywhere at any time. It might be in Splunk and it might not. A <CODE>log</CODE> is the <CODE>digital exhaust</CODE> of that event; it is the plain-text vestige that indicates than an event happened. A <CODE>result</CODE> is each <CODE>thing</CODE> that is returned from a Splunk search.</P> Mon, 09 Sep 2019 14:27:49 GMT woodcock 2019-09-09T14:27:49Z https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478009#M192799 <P>Can anyone explain me what's the difference between an event and a log. </P> <P>According to me, an event is set of logs generated after matching a correlation. </P> Fri, 06 Sep 2019 20:03:01 GMT https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478009#M192799 aruncp333 2019-09-06T20:03:01Z https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478010#M192800 <P>An "event" is any one record returned from an index or search. It could be a single log, or a single record that contains a count of logs, or a single record that says "100".</P> <P>A "log" is a specific type of event, specifically documenting that something happened at a particular time.</P> Fri, 06 Sep 2019 20:45:35 GMT https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478010#M192800 DalJeanis 2019-09-06T20:45:35Z https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478011#M192801 <P>That's interesting, Dal. </P> <P>Further I have a follow up question. </P> <P>Question: How can I propose splunk sizing if the customer is having existing solution in terms of events per second (EPS). </P> <P>Let's say, 1000,000EPS conversion to Splunk/day license sizing. </P> <P>Thanks in advance. </P> Sat, 07 Sep 2019 08:59:47 GMT https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478011#M192801 aruncp333 2019-09-07T08:59:47Z https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478012#M192802 <P>Really you have 3 terms <CODE>event</CODE>, <CODE>log</CODE>, and <CODE>result</CODE>.</P> <P>An <CODE>event</CODE> is a thing that happened anywhere at any time. It might be in Splunk and it might not. A <CODE>log</CODE> is the <CODE>digital exhaust</CODE> of that event; it is the plain-text vestige that indicates than an event happened. A <CODE>result</CODE> is each <CODE>thing</CODE> that is returned from a Splunk search.</P> Mon, 09 Sep 2019 14:27:49 GMT https://community.splunk.com/t5/Splunk-Search/What-s-the-difference-between-an-event-and-a-log/m-p/478012#M192802 woodcock 2019-09-09T14:27:49Z