Save Time with Intermediate Splunk Search Skills

[melissap]

View our Platform Tech Talk: Save Time with Intermediate Splunk Search Skills  

Ramping up on Splunk? Search is one of the most important topics for users looking to get the most out of Splunk. Splunk’s powerful search capabilities allow you to search and investigate your data, regardless of its structure, to find the needle in your data haystack. You can really start to make Splunk work for you if you know proper SPL syntax and how to filter your search before you execute it. Structure your Splunk searches to get the right results the first time. Use eval and statistics commands to enrich and analyze your data. Create actionable search products from your results like lookup tables and KVStore collections to store for continued use.

Tune in to learn about:

• Search Syntax and Filtering
• Eval and Stats Commands
• Data outputs including Lookup Tables and KVStore collections

[fredd]

Are these webinars going to be recorded? If not, are we allowed to record them?

[melissap]

Hi @fredd. Yes, these are recorded. Sign up and you will receive the recording the day after the live airing.

[melissap]

Here is a question that was asked during the live Tech Talk:

Q: Question on the priority of scheduled searches. Is there a way to prioritize searches for a certain user/role over other searches? I understand ad hoc historical searches takes precedence by default, how to change this to get certain user's scheduled searches highest priority?

A: See Workload Management feature where you use cgroups etc to setup priorities and schedules for searches https://docs.splunk.com/Documentation/Splunk/8.1.2/Workloads/Aboutworkloadmanagement

[melissap]

Here are additional resources for you to continue on your Journey.

Take the training starting with Free Splunk Fundamentals

Check out Search Documentation

Read the Search Best Practices Blog

Ask your questions in the Search section