Book Image

Data Analytics Using Splunk 9.x

By : Dr. Nadine Shillingford
5 (1)
Book Image

Data Analytics Using Splunk 9.x

5 (1)
By: Dr. Nadine Shillingford

Overview of this book

Splunk 9 improves on the existing Splunk tool to include important features such as federated search, observability, performance improvements, and dashboarding. This book helps you to make the best use of the impressive and new features to prepare a Splunk installation that can be employed in the data analysis process. Starting with an introduction to the different Splunk components, such as indexers, search heads, and forwarders, this Splunk book takes you through the step-by-step installation and configuration instructions for basic Splunk components using Amazon Web Services (AWS) instances. You’ll import the BOTS v1 dataset into a search head and begin exploring data using the Splunk Search Processing Language (SPL), covering various types of Splunk commands, lookups, and macros. After that, you’ll create tables, charts, and dashboards using Splunk’s new Dashboard Studio, and then advance to work with clustering, container management, data models, federated search, bucket merging, and more. By the end of the book, you’ll not only have learned everything about the latest features of Splunk 9 but also have a solid understanding of the performance tuning techniques in the latest version.
Table of Contents (18 chapters)
1
Part 1: Getting Started with Splunk
5
Part 2: Visualizing Data with Splunk
10
Part 3: Advanced Topics in Splunk

Summary

In this chapter, we created dashboards and reports using Simple XML. The capabilities that Splunk offers make dashboard creation a fun and creative task. We enjoyed adding different kinds of inputs such as text boxes and dropdowns that we can use to filter data in the dashboard queries. We learned how to use tokens to pass the values from the inputs to the query. Then, we learned how to make our dashboards dynamic by introducing drilldowns. We also explored the dashboard source and observed the different parts of the XML. Finally, we used the various widgets in Splunk Dashboard Studio, which provides widgets to create a dashboard with inputs. We learned that these widgets allow users with limited Splunk experience to create dashboards.

In the next chapter, we will move away from the visualization frontend of Splunk to explore the way Splunk stores data.