Book Image

Splunk Operational Intelligence Cookbook

Book Image

Splunk Operational Intelligence Cookbook

Overview of this book

Table of Contents (17 chapters)
Splunk Operational Intelligence Cookbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Summary


The key takeaways from this chapter are as follows:

  • Data models allow Splunk datasets and associated knowledge to be mapped for use by the Pivot tool

  • Data models contain objects of different types, constraints, and attributes

  • Data models can be accelerated to speed up Pivot searching over the underlying dataset mapped by the model

  • Data models power the Pivot tool and allow dynamic reports and visualizations to be built without the need to write any searches

  • The Pivot tool allows for simple point and click, drag-and-drop, and slicing and dicing of modeled data

  • Pivot is suitable for less technical users, but leveraging the Splunk SPL directly is more powerful and advanced