Splunk Search

best way to run a query

howard_mclean
New Member

what is the best approach to run splunk queries

Tags (1)
0 Karma

deepakc
Builder

Start here - it shows the basics   
https://www.splunk.com/en_us/blog/customers/splunk-clara-fication-search-best-practices.html 

Here are all the many different commands with SPL with examples  - once you have developed the basic concepts, you can start to apply various commands for your use cases. 

https://docs.splunk.com/Documentation/SplunkCloud/9.1.2312/SearchReference/ListOfSearchCommands

 

Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...