Book Image

Advanced Splunk

By : Ashish Kumar Tulsiram Yadav
Book Image

Advanced Splunk

By: Ashish Kumar Tulsiram Yadav

Overview of this book

Master the power of Splunk and learn the advanced strategies to get the most out of your machine data with this practical advanced guide. Make sense of the hidden data of your organization – the insight of your servers, devices, logs, traffic and clouds. Advanced Splunk shows you how. Dive deep into Splunk to find the most efficient solution to your data problems. Create the robust Splunk solutions you need to make informed decisions in big data machine analytics. From visualizations to enterprise integration, this well-organized high level guide has everything you need for Splunk mastery. Start with a complete overview of all the new features and advantages of the latest version of Splunk and the Splunk Environment. Go hands on with uploading data, search commands for basic and advanced analytics, advanced visualization techniques, and dashboard customizing. Discover how to tweak Splunk to your needs, and get a complete on Enterprise Integration of Splunk with various analytics and visualization tools. Finally, discover how to set up and use all the new features of the latest version of Splunk.
Table of Contents (20 chapters)
Advanced Splunk
Credits
About the Author
Acknowledgements
About the Reviewer
www.PacktPub.com
Preface
Index

Multi-search management


Multi-search management is used to manage multiple background searches to populate the results of various panels of the dashboard. Multiple searches run in the background, and the result of the search query is used to run post-process searches, which utilize the result of the background search to evaluate their own result.

Let me explain what multi-search management is so that you may understand it better. Suppose in the dashboard there are six panels and each panel takes 10 seconds for processing the search results. So for six panels, the time will be 60 seconds. Now, if we have a background search which gets all the data required by all six panels in 20 seconds, then using post-process searches instead of running a search on the whole data, the result of the background search is used and the time is reduced to almost three to four seconds per panel instead of 10 seconds per panel.

Thus, multi-search management can be used in a dashboard which has many panels to increase...