Practical Splunk Search Processing Language: A Guide for Mastering SPL Commands for Maximum Efficiency and Outcome
Autor Karun Subramanianen Limba Engleză Paperback – 24 noi 2020
Use this practical guide to the Splunk operational data intelligence platform to search, visualize, and analyze petabyte-scale, unstructured machine data. Get to the heart of the platform and use the Search Processing Language (SPL) tool to query the platform to find the answers you need.
With more than 140 commands, SPL gives you the power to ask any question of machine data. However, many users (both newbies and experienced users) find the language difficult to grasp and complex. This book takes you through the basics of SPL using plenty of hands-on examples and emphasizes the most impactful SPL commands (such as eval, stats, and timechart). You will understand the most efficient ways to query Splunk (such as learning the drawbacks of subsearches and join, and why it makes sense to use tstats). You will be introduced to lesser-known commands that can be very useful, such as using the command rex to extract fieldsand erex to generate regular expressions automatically.
In addition, you will learn how to create basic visualizations (such as charts and tables) and use prescriptive guidance on search optimization. For those ready to take it to the next level, the author introduces advanced commands such as predict, kmeans, and cluster.
With more than 140 commands, SPL gives you the power to ask any question of machine data. However, many users (both newbies and experienced users) find the language difficult to grasp and complex. This book takes you through the basics of SPL using plenty of hands-on examples and emphasizes the most impactful SPL commands (such as eval, stats, and timechart). You will understand the most efficient ways to query Splunk (such as learning the drawbacks of subsearches and join, and why it makes sense to use tstats). You will be introduced to lesser-known commands that can be very useful, such as using the command rex to extract fieldsand erex to generate regular expressions automatically.
In addition, you will learn how to create basic visualizations (such as charts and tables) and use prescriptive guidance on search optimization. For those ready to take it to the next level, the author introduces advanced commands such as predict, kmeans, and cluster.
What You Will Learn
- Use real-world scenarios (such as analyzing a web access log) to search, group, correlate, and create reports using SPL commands
- Enhance your search results using lookups and create new lookup tables using SPL commands
- Extract fields from your search results
- Compare data from multiple time frames in one chart (such as comparing your current day application performance to the average of the past 30 days)
- Analyze the performance of your search using Job Inspector and identify execution costs of various components of your search
Who This Book Is For
Application developers, architects, DevOps engineers, application support engineers, network operations center analysts, security operations center (SOC) analysts, and cyber security professionals who use Splunk to search and analyze their machine data
Preț: 264.17 lei
Preț vechi: 330.21 lei
-20% Nou
Puncte Express: 396
Preț estimativ în valută:
50.59€ • 54.72$ • 42.15£
50.59€ • 54.72$ • 42.15£
Carte tipărită la comandă
Livrare economică 11-25 decembrie
Livrare express 05-09 noiembrie pentru 41.90 lei
Preluare comenzi: 021 569.72.76
Specificații
ISBN-13: 9781484262757
ISBN-10: 1484262751
Pagini: 268
Ilustrații: XXI, 268 p. 134 illus.
Dimensiuni: 178 x 254 x 18 mm
Greutate: 0.51 kg
Ediția:1st ed.
Editura: Apress
Colecția Apress
Locul publicării:Berkeley, CA, United States
ISBN-10: 1484262751
Pagini: 268
Ilustrații: XXI, 268 p. 134 illus.
Dimensiuni: 178 x 254 x 18 mm
Greutate: 0.51 kg
Ediția:1st ed.
Editura: Apress
Colecția Apress
Locul publicării:Berkeley, CA, United States
V-ar putea interesa
-
On the Foundations of ComputingGiuseppe Primiero-22%Preț: 334.26 lei431.27 lei -
Algorithms Are Not EnoughHerbert L. Roitblat-20%Preț: 216.06 lei270.07 lei -
Blockchain Chicken FarmXiaowei WangPreț: 81.39 lei -
Possible Minds: Twenty-Five Ways of Looking at AIJohn Brockman-34%Preț: 74.52 lei113.68 lei -
-20%Preț: 425.22 lei531.52 lei -
The Zynq BookLouise H CrockettPreț: 263.47 lei -
Algorithms Illuminated (Part 2)Tim Roughgarden-20%Preț: 87.79 lei109.74 lei -
Database SystemsRamez Elmasri-20%Preț: 466.42 lei583.02 lei -
Agent-Based Semantic Web Service CompositionSandeep Kumar-20%Preț: 304.34 lei380.43 lei -
The Rationalist's Guide to the GalaxyTom Chivers-39%Preț: 41.38 lei68.09 lei -
Problem Solving with Algorithms and Data Structures Using PythonBradley N. MillerPreț: 349.70 lei -
tmux 2Brian P. Hogan-20%Preț: 93.09 lei116.36 lei -
The Revolutionary PhenotypeJean-François GariépyPreț: 111.66 lei -
AdventureJamie LendinoPreț: 116.10 lei -
The Alignment ProblemBrian Christian-31%Preț: 53.31 lei77.26 lei -
10 Short Lessons in Artificial Intelligence and RoboticsPeter J. Bentley-20%Preț: 79.21 lei99.02 lei -
Preț: 419.60 lei -
-20%Preț: 394.74 lei493.42 lei -
-20%Preț: 393.32 lei491.65 lei -
-20%Preț: 395.17 lei493.96 lei -
-20%Preț: 398.44 lei498.06 lei -
-20%Preț: 390.18 lei487.73 lei -
-20%Preț: 394.86 lei493.58 lei -
-20%Preț: 395.17 lei493.96 lei -
-20%Preț: 354.08 lei442.61 lei -
Datenbank-HandbuchPeter C. Lockemann-20%Preț: 365.49 lei456.87 lei -
Peeling Design PatternsNarasimha KarumanchiPreț: 285.84 lei -
FUZZY SETS,FUZZY LOGIC,& FUZZY SYS (V6)G J Klir Bo Yuan-20%Preț: 696.26 lei870.32 lei
Cuprins
Chapter 1: Introducing the Splunk Platform.- Chapter 2: Calculating Statistics.- Chapter 3: Using Time-Related Operations.- Chapter 4: Grouping and Correlating.- Chapter 5: Working with Fields.- Chapter 6: Using Lookups.- Chapter 7: Advanced SPL Commands. Chapter 8: Less Common Yet Impactful SPL Commands.- Chapter 9: Optimizing SPL.
Notă biografică
Karun Subramanian is an IT operations expert and a Splunk certified architect. He is committed to helping IT organizations implement world-class observability by making use of machine-generated data. His IT career has spanned more than two decades, ranging from systems administrator to software engineer to IT director. Possessing deep expertise of the Splunk platform, he has assisted teams to solve complex problems in the area of DevOps, security, and business analytics. He has worked in engineering roles for firms including Wells Fargo Bank, Express Scripts, Federal Reserve Bank, and Optum.
Textul de pe ultima copertă
Use this practical guide to the Splunk operational data intelligence platform to search, visualize, and analyze petabyte-scale, unstructured machine data. Get to the heart of the platform and use the Search Processing Language (SPL) tool to query the platform to find the answers you need.
With more than 140 commands, SPL gives you the power to ask any question of machine data. However, many users (both newbies and experienced users) find the language difficult to grasp and complex. This book takes you through the basics of SPL using plenty of hands-on examples and emphasizes the most impactful SPL commands (such as eval, stats, and timechart). You will understand the most efficient ways to query Splunk (such as learning the drawbacks of subsearches and join, and why it makes sense to use tstats). You will be introduced to lesser-known commands that can be very useful, such as using the command rex to extract fields and erex to generate regular expressions automatically.
In addition, you will learn how to create basic visualizations (such as charts and tables) and use prescriptive guidance on search optimization. For those ready to take it to the next level, the author introduces advanced commands such as predict, kmeans, and cluster.
With more than 140 commands, SPL gives you the power to ask any question of machine data. However, many users (both newbies and experienced users) find the language difficult to grasp and complex. This book takes you through the basics of SPL using plenty of hands-on examples and emphasizes the most impactful SPL commands (such as eval, stats, and timechart). You will understand the most efficient ways to query Splunk (such as learning the drawbacks of subsearches and join, and why it makes sense to use tstats). You will be introduced to lesser-known commands that can be very useful, such as using the command rex to extract fields and erex to generate regular expressions automatically.
In addition, you will learn how to create basic visualizations (such as charts and tables) and use prescriptive guidance on search optimization. For those ready to take it to the next level, the author introduces advanced commands such as predict, kmeans, and cluster.
What You Will Learn
- Use real-world scenarios (such as analyzing a web access log) to search, group, correlate, and create reports using SPL commands
- Enhance your search results using lookups and create new lookup tables using SPL commands
- Extract fields from your search results
- Compare data from multiple time frames in one chart (such as comparing your current day application performance to the average of the past 30 days)
- Analyze the performance of your search using Job Inspector and identify execution costs ofvarious components of your search
This book is for application developers, architects, DevOps engineers, application support engineers, network operations center analysts, security operations center (SOC) analysts, and cyber security professionals who use Splunk to search and analyze their machine data.
Karun Subramanian is an IT operations expert and a Splunk certified architect. He is committed to helping IT organizations implement world-class observability by making use of machine-generated data. His IT career has spanned more than two decades, ranging from systems administrator to software engineer to IT director. Possessing deep expertise of the Splunk platform, he has assisted teams to solve complex problems in the area of DevOps, security, and business analytics. He has worked in engineering roles for firms including Wells Fargo Bank, Express Scripts, Federal Reserve Bank, and Optum.
Caracteristici
Serves as a quick reference for the most popular SPL commands Provides detailed guidance on improving the performance of SPL commands Teaches SPL through the use of numerous real-world examples