We are going to learn about the not-so-common searching and reporting techniques that have been used in real-world scenarios in order to present data both accurately and in the pretty format that leadership asks us for. There are also some caveats to the Search Processing Language that we need to understand when performing a search, not only for presentation purposes, but also for presenting accurate data.
We will learn about:
General practices (efficiencies):
Core fields
Case sensitivity
Inclusive versus exclusive
Search modes:
Fast Mode
Smart Mode
Verbose Mode
Advanced charting:
Overlay
Xyseries
Appending results
Day-over-day overlay