Tivoli is more of an infrastructure monitoring solution(Similar to HP Operations Manager), logfile monitoring is one small part of Tivoli. whereas for Splunk logfile monitoring is the main part. if you are doing some logfile monitoring with Tivoli, you could do the same thing plus much more, with Splunk. If Tivoli's logfile monitoring features can be scored as 2 out of 10, splunk features can be scored as 9 out of 10. Splunk got free trials and there is a "free splunk" as well(it got some limitations, but for your case, it will suit you), you could download and give it a try. you will like it for sure. https://www.splunk.com/en_us/download/splunk-enterprise.html From Garner's website, please check this Tivoli vs Splunk Comparison: https://www.gartner.com/reviews/market/security-information-event-management/compare/ibm-vs-splunk ... View more

There is no real difference that matters except for the data export penalty. Getting data into AWS is free, getting data out can be quite costly if you have to move it around or transform it at all. ... View more

@ashish_chand this seems to be tutorial data from Splunk Search Tutorial which is part of Splunk Search Fundamentals course. Could you please elaborate the need for qustions? Hope this is not one of the lab assignments. Kindly use this forum to ask queries when you get stuck or need clarification/details about anything related to Splunk. Kindly don't use Splunk Answers platform to ask Community Members solve your assignments. Even if this is not an assignment question, logically speaking you use case should be to find productId with price greater than 30 . If so check out Example 4 from Splunk Documentation of inputlookup command. Provided above CSV has been uploaded to Splunk as a Lookup file. If you have a correlated data indexed where there is actually customer information i.e. customerid , then a Customer may by more than one products hence price would be sum of individual product prices and in most of the cases above $30. Please confirm whether this is the use case. If so you would need to provide indexed data sample with customerid. *In order to make proper use of this community and learn, first try the queries yourself then post the same here with specific problems you are facing! Community members would be happy to assist 🙂 * ... View more