In this chapter, we have discussed how to create form-based dashboards leveraging $foo$ variables as selectors to appropriately pass information to another search, or another dashboard; also, we have seen how to create an effective drilldown effect. In the next chapter, we will see how to optimize dashboards to increase performance. This ultimately affects how quickly dashboards load results. To do this, we can adjust search queries, leverage summary indexes, the KV store, accelerated searches, and data models to name a few.
Splunk Best Practices
Splunk Best Practices
Overview of this book
This book will give you an edge over others through insights that will help you in day-to-day instances. When you're working with data from various sources in Splunk and performing analysis on this data, it can be a bit tricky. With this book, you will learn the best practices of working with Splunk.
You'll learn about tools and techniques that will ease your life with Splunk, and will ultimately save you time. In some cases, it will adjust your thinking of what Splunk is, and what it can and cannot do.
To start with, you'll get to know the best practices to get data into Splunk, analyze data, and package apps for distribution. Next, you'll discover the best practices in logging, operations, knowledge management, searching, and reporting. To finish off, we will teach you how to troubleshoot Splunk searches, as well as deployment, testing, and development with Splunk.
Related Content you might be interested in
Current Title:
Splunk Best Practices
No titles found
Table of Contents (16 chapters)
Splunk Best Practices
Credits
About the Author
About the Reviewer
www.PacktPub.com
Preface
Data Inputs
Data Scrubbing
Knowledge Management
Alerting
Searching and Reporting
Form-Based Dashboards
Search Optimization
App Creation and Consolidation
Advanced Data Routing
Customer Reviews