Splunk Search

How does the cluster command work?

indeed_2000
Motivator

hi how exactly cluster commad work?

I have lots of unstructured data that has different key and value, how splunk detect and cluster these lines?

What happen behind scene?

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Cluster

 

Any idea?

Thanks 

Labels (3)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...