Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Splunk Operational Intelligence Cookbook
  • Table Of Contents Toc
Splunk Operational Intelligence Cookbook

Splunk Operational Intelligence Cookbook

4.2 (15)
Buy this Book
close
close
Splunk Operational Intelligence Cookbook

Splunk Operational Intelligence Cookbook

4.2 (15)
Buy this Book

Overview of this book

This book is intended for users of all levels who are looking to leverage the Splunk Enterprise platform as a valuable operational intelligence tool. The recipes provided in this book will appeal to individuals from all facets of a business – IT, Security, Product, Marketing, and many more!
Table of Contents (12 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Play Time – Getting Data In
Icon
1. Play Time – Getting Data In
Icon
Introduction
Icon
Indexing files and directories
Icon
Getting data through network ports
Icon
Using scripted inputs
Icon
Using modular inputs
Icon
Using the Universal Forwarder to gather data
Icon
Loading the sample data for this book
Icon
Defining field extractions
Icon
Defining event types and tags
Icon
Summary
2
2. Diving into Data – Search and Report
chevron up
Icon
2. Diving into Data – Search and Report
Icon
Introduction
Icon
Making raw event data readable
Icon
Finding the most accessed web pages
Icon
Finding the most used web browsers
Icon
Identifying the top-referring websites
Icon
Charting web page response codes
Icon
Displaying web page response time statistics
Icon
Listing the top viewed products
Icon
Charting the application's functional performance
Icon
Charting the application's memory usage
Icon
Counting the total number of database connections
Icon
Summary
3
3. Dashboards and Visualizations – Make Data Shine
Icon
3. Dashboards and Visualizations – Make Data Shine
Icon
Introduction
Icon
Creating an Operational Intelligence dashboard
Icon
Using a pie chart to show the most accessed web pages
Icon
Displaying the unique number of visitors
Icon
Using a gauge to display the number of errors
Icon
Charting the number of method requests by type and host
Icon
Creating a timechart of method requests, views, and response times
Icon
Using a scatter chart to identify discrete requests by size and response time
Icon
Creating an area chart of the application's functional statistics
Icon
Using a bar chart to show the average amount spent by category
Icon
Creating a line chart of item views and purchases over time
Icon
Summary
4
4. Building an Operational Intelligence Application
Icon
4. Building an Operational Intelligence Application
Icon
Introduction
Icon
Creating an Operational Intelligence application
Icon
Adding dashboards and reports
Icon
Organizing the dashboards more efficiently
Icon
Dynamically drilling down on activity reports
Icon
Creating a form to search web activities
Icon
Linking web page activity reports to the form
Icon
Displaying a geographical map of visitors
Icon
Scheduling the PDF delivery of a dashboard
Icon
Summary
5
5. Extending Intelligence – Data Models and Pivoting
Icon
5. Extending Intelligence – Data Models and Pivoting
Icon
Introduction
Icon
Creating a data model for web access logs
Icon
Creating a data model for application logs
Icon
Accelerating data models
Icon
Pivoting total sales transactions
Icon
Pivoting purchases by geographical location
Icon
Pivoting slowest responding web pages
Icon
Pivot charting top error codes
Icon
Summary
6
6. Diving Deeper – Advanced Searching
Icon
6. Diving Deeper – Advanced Searching
Icon
Introduction
Icon
Calculating the average session time on a website
Icon
Calculating the average execution time for multi-tier web requests
Icon
Displaying the maximum concurrent checkouts
Icon
Analyzing the relationship of web requests
Icon
Predicting website-traffic volumes
Icon
Finding abnormally sized web requests
Icon
Identifying potential session spoofing
Icon
Summary
7
7. Enriching Data – Lookups and Workflows
Icon
7. Enriching Data – Lookups and Workflows
Icon
Introduction
Icon
Looking up product code descriptions
Icon
Flagging suspicious IP addresses
Icon
Creating a session state table
Icon
Adding hostnames to IP addresses
Icon
Searching ARIN for a given IP address
Icon
Triggering a Google search for a given error
Icon
Creating a ticket for application errors
Icon
Looking up inventory from an external database
Icon
Summary
8
8. Being Proactive – Creating Alerts
Icon
8. Being Proactive – Creating Alerts
Icon
Introduction
Icon
Alerting on abnormal web page response times
Icon
Alerting on errors during checkout in real time
Icon
Alerting on abnormal user behavior
Icon
Alerting on failure and triggering a scripted response
Icon
Alerting when predicted sales exceed inventory
Icon
Summary
9
9. Speed Up Intelligence – Data Summarization
Icon
9. Speed Up Intelligence – Data Summarization
Icon
Introduction
Icon
Calculating an hourly count of sessions versus completed transactions
Icon
Backfilling the number of purchases by city
Icon
Displaying the maximum number of concurrent sessions over time
Icon
Summary
10
10. Above and Beyond – Customization, Web Framework, REST API, and SDKs
Icon
10. Above and Beyond – Customization, Web Framework, REST API, and SDKs
Icon
Introduction
Icon
Customizing the application's navigation
Icon
Adding a force-directed graph of web hits
Icon
Adding a calendar heatmap of product purchases
Icon
Remotely querying Splunk's REST API for unique page views
Icon
Creating a Python application to return unique IP addresses
Icon
Creating a custom search command to format product names
Icon
Summary
11
Index
Icon
Index

Displaying web page response time statistics

No one likes to wait for a web page to load, and we certainly do not want users of our web application waiting either! Within our web access logs, there is a field named response that tracks the total time the page has taken to load in milliseconds.

In this recipe, we will track the average page load time over the past week at different times of the day.

Getting ready

To step through this recipe, you will need a running Splunk Enterprise server, with the sample data loaded from Chapter 1, Play Time – Getting Data In. You should be familiar with the Splunk search bar and the time range picker.

How to do it...

Follow the given steps to search and calculate web page response time statistics over the past week:

  1. Log in to your Splunk server.

  2. Select the Search & Reporting application.

  3. Ensure that the time range picker is set to Last 7 Days and type the following search into the Splunk search bar. Then, click on the magnifying glass icon or hit Enter.

    sourcetype...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Splunk Operational Intelligence Cookbook
End of Chapter 2
Next Chapter
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon