This chapter will serve as a brief overview and reference for several important topics and skills that any Splunk administrator will want to have in their toolkit. While Splunk is inherently stable and reliable, there will be times when you have to troubleshoot problems; this chapter covers the most useful Splunk logs and tools for determining what's working and what isn't. Then, we'll segue into using the Monitoring Console to keep tabs on Splunk health, as well as providing examples of searches that can be built for monitoring disk and index usage versus configured capacity, search performance, and several other factors that an administrator will be interested in. As a finale for this chapter, and book, the reader will be introduced to the essential concepts and references for taking Splunk to the next level—using API endpoints and the Splunk...
-
Book Overview & Buying
-
Table Of Contents
Splunk 7.x Quick Start Guide
By :
Splunk 7.x Quick Start Guide
By:
Overview of this book
Splunk is a leading platform and solution for collecting, searching, and extracting value from ever increasing amounts of big data - and big data is eating the world! This book covers all the crucial Splunk topics and gives you the information and examples to get the immediate job done. You will find enough insights to support further research and use Splunk to suit any business environment or situation.
Splunk 7.x Quick Start Guide gives you a thorough understanding of how Splunk works. You will learn about all the critical tasks for architecting, implementing, administering, and utilizing Splunk Enterprise to collect, store, retrieve, format, analyze, and visualize machine data. You will find step-by-step examples based on real-world experience and practical use cases that are applicable to all Splunk environments. There is a careful balance between adequate coverage of all the critical topics with short but relevant deep-dives into the configuration options and steps to carry out the day-to-day tasks that matter.
By the end of the book, you will be a confident and proficient Splunk architect and administrator.
Table of Contents (12 chapters)
Preface
Free Chapter
Introduction to Splunk
Architecting Splunk
Installing and Configuring Splunk
Getting Data into Splunk
Administering Splunk Apps and Users
Searching with Splunk
Splunk Knowledge Objects
Splunk Reports, Dashboards, and Alerts
Splunk Applications
Advanced Splunk
Other Books You May Enjoy
