Book Image

Mastering Splunk

By : James D. Miller
Book Image

Mastering Splunk

By: James D. Miller

Overview of this book

Table of Contents (18 chapters)
Mastering Splunk
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Search results


When you run a Splunk search, you'll see that not all of the Splunk Web search results tabs (Events, Statistics, and Visualization) will be populated.

  • Event searches: If your search returns only events, only the Events results tab is populated

  • Transformational searches: If your search includes transforming commands, you can view the results in the Statistics and Visualization tabs (as well as in the Events tab)

  • Transformational commands: Transformational commands transform the event results into numerical values that Splunk can use for statistical purposes, that is, creating charts, tables, and graphs

Transforming commands include the following:

  • chart

  • timechart

  • stats

  • top

  • rare

  • contingency

Some basic Splunk search examples

To illustrate the differences in the results tabs, let's use an earlier search example. You might recall the following search (using a macro that we created):

`TM1Events("october/24/2007")`

This search is a simple events search and will only populate the...