Splunk Tech Talks
Deep-dives for technical practitioners.

Save Time with Intermediate Splunk Search Skills

melissap
Splunk Employee
Splunk Employee

View our Platform Tech Talk: Save Time with Intermediate Splunk Search Skills

Ramping up on Splunk? Search is one of the most important topics for users looking to get the most out of Splunk. Splunk’s powerful search capabilities allow you to search and investigate your data, regardless of its structure, to find the needle in your data haystack. You can really start to make Splunk work for you if you know proper SPL syntax and how to filter your search before you execute it. Structure your Splunk searches to get the right results the first time. Use eval and statistics commands to enrich and analyze your data. Create actionable search products from your results like lookup tables and KVStore collections to store for continued use.

Tune in to learn about:

  • Search Syntax and Filtering
  • Eval and Stats Commands
  • Data outputs including Lookup Tables and KVStore collections

 

fredd
Loves-to-Learn

Are these webinars going to be recorded? If not, are we allowed to record them?

melissap
Splunk Employee
Splunk Employee

Hi @fredd. Yes, these are recorded. Sign up and you will receive the recording the day after the live airing.

melissap
Splunk Employee
Splunk Employee

Here is a question that was asked during the live Tech Talk:

Q: Question on the priority of scheduled searches. Is there a way to prioritize searches for a certain user/role over other searches? I understand ad hoc historical searches takes precedence by default, how to change this to get certain user's scheduled searches highest priority?
 
A: See Workload Management feature where you use cgroups etc to setup priorities and schedules for searches https://docs.splunk.com/Documentation/Splunk/8.1.2/Workloads/Aboutworkloadmanagement
melissap
Splunk Employee
Splunk Employee

Here are additional resources for you to continue on your Journey.

 

Take the training starting with Free Splunk Fundamentals

Check out Search Documentation

Read the Search Best Practices Blog

Ask your questions in the Search section