Opleiding: Result Modification (SRM)
Result Modification (SRM)
This course is designed for Splunk users, analysts, and administrators who want to learn how to modify and manipulate output and normalize data.
You will learn how to use the untable, xyseries, appendpipe, eventstats, and streamstats commands to modify result sets and use the eval command and eval functions to manipulate field values and normalize data across multiple data sources.
- Users/Analysts
- Administrators
- Engineers
Module1 - Manipulating Output
- Convert a 2-D table into a flat table with the untable command
- Convert a flat table into a 2-D table with the xyseries command
Module 2 - Modifying Result Sets
- Append data to search results with the appendpipe command
- Calculate event statistics with the eventstats command
- Calculate "streaming" statistics with the streamstats command
Module 3 – Modifying Field Values
- Understand the eval command
- Use conversion and text eval functions to modify...
