Improving Your Splunk Skills: Leverage the operational intelligence capabilities of Splunk to unlock new hidden business insights

by James D. Miller, Paul R. Johnson, Josh Diakun, Derek Mock

Overview

Transform machine-generated data into valuable business insights using the powers of Splunk

Key Features

• Explore the all-new machine learning toolkit in Splunk 7.x
• Tackle any problems related to searching and analyzing your data with Splunk
• Get the latest information and business insights on Splunk 7.x

Book Description

Splunk makes it easy for you to take control of your data and drive your business with the cutting edge of operational intelligence and business analytics. Through this Learning Path, you'll implement new services and utilize them to quickly and efficiently process machine-generated big data.

You'll begin with an introduction to the new features, improvements, and offerings of Splunk 7. You'll learn to efficiently use wildcards and modify your search to make it faster. You'll learn how to enhance your applications by using XML dashboards and configuring and extending Splunk. You'll also find step-by-step demonstrations that'll walk you through building an operational intelligence application. As you progress, you'll explore data models and pivots to extend your intelligence capabilities.

By the end of this Learning Path, you'll have the skills and confidence to implement various Splunk services in your projects.

This Learning Path includes content from the following Packt products:

• Implementing Splunk 7 - Third Edition by James Miller
• Splunk Operational Intelligence Cookbook - Third Edition by Paul R Johnson, Josh Diakun, et al

What you will learn

• Master the new offerings in Splunk: Splunk Cloud and the Machine Learning Toolkit
• Create efficient and effective searches
• Master the use of Splunk tables, charts, and graph enhancements
• Use Splunk data models and pivots with faster data model acceleration
• Master all aspects of Splunk XML dashboards with hands-on applications
• Apply ML algorithms for forecasting and anomaly detection
• Integrate advanced JavaScript charts and leverage Splunk's API

Who this book is for

This Learning Path is for data analysts, business analysts, and IT administrators who want to leverage the Splunk enterprise platform as a valuable operational intelligence tool. Existing Splunk users who want to upgrade and get up and running with Splunk 7.x will also find this book useful. Some knowledge of Splunk services will help you get the most out of this Learning Path.

James D. Miller is an innovator and accomplished Sr. Project Lead and Solution Architect with 37 years of experience of extensive design and development across multiple platforms and technologies. His roles include leveraging his consulting experience to provide hands-on leadership in all phases of advanced analytics and related technology projects, as well as providing recommendations for process improvement, report accuracy, adoption of disruptive technologies, and insight identification. Paul R. Johnson has over 10 years of data intelligence experience in the areas of information security, operations, and compliance. He is a partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. Paul previously worked for a Fortune 10 company, leading IT risk intelligence initiatives and managing a global Splunk deployment. Paul co-founded the Splunk Toronto User Group and lives and works in Toronto, Canada. Josh Diakun is an IT operation and security specialist with a focus on creating data-driven operational processes. He has over 10 years of experience managing and architecting enterprise-grade IT environments. For the past 7 years, he has been architecting, deploying and developing on Splunk as the core platform for organizations to gain security and operational intelligence. Josh is a founding partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. He is also a co-founder of the Splunk Toronto User Group. Derek Mock is a software developer and big data architect who specializes in IT operations, information security, and cloud technologies. He has 15 years' experience developing and operating large enterprise-grade deployments and SaaS applications. He is a founding partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. For the past 6 years, he has been leveraging Splunk as the core tool to deliver key operational intelligence. Derek is based in Toronto, Canada, and is a co-founder of the Splunk Toronto User Group.

Product Details

ISBN-13:	9781838981020
Publisher:	Packt Publishing
Publication date:	08/22/2019
Sold by:	Barnes & Noble
Format:	eBook
Pages:	680
File size:	25 MB
Note:	This product may take a few minutes to download.

About the Author

James D. Miller is an innovator and accomplished senior project lead and solution architect with 37 years' experience of extensive design and development across multiple platforms and technologies. Roles include leveraging his consulting experience to provide hands-on leadership in all phases of advanced analytics and related technology projects, providing recommendations for process improvement, report accuracy, the adoption of disruptive technologies, enablement, and insight identification. He has also written a number of books, including Statistics for Data Science; Mastering Predictive Analytics with R, Second Edition; Big Data Visualization; Learning Watson Analytics; and many more.


Paul R Johnson has over 10 years of data intelligence experience in the areas of information security, operations, and compliance. He is a partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. Paul previously worked for a Fortune 10 company, leading IT risk intelligence initiatives and managing a global Splunk deployment. Paul co-founded the Splunk Toronto User Group and lives and works in Toronto, Canada.


Josh Diakun is an IT operations and security specialist with a focus on creating data-driven operational processes. He has over 10 years of experience managing and architecting enterprise-grade IT environments. For the past 7 years, he has been architecting, deploying and developing on Splunk as the core platform for organizations to gain security and operational intelligence. Josh is a founding partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. He is also a co-founder of the Splunk Toronto User Group.


Derek Mock is a software developer and big data architect who specializes in IT operations, information security, and cloud technologies. He has 15 years' experience developing and operating large enterprise-grade deployments and SaaS applications. He is a founding partner at Discovered Intelligence, a company specializing in data intelligence services and solutions. For the past 6 years, he has been leveraging Splunk as the core tool to deliver key operational intelligence. Derek is based in Toronto, Canada, and is a co-founder of the Splunk Toronto User Group.

Table of Contents

Table of Contents

1. The Splunk Interface
2. Understanding Search
3. Tables, Charts, and Fields
4. Data Models and Pivots
5. Simple XML Dashboards
6. Extending Search
7. Working with Apps
8. Building Advanced Dashboards
9. Summary Indexes and CSV Files
10. Configuring Splunk
11. Play Time – Getting Data In
12. Building an Operational Intelligence Application
13. Diving Deeper – Advanced Searching, Machine Learning, and Predictive Analytics
14. Speeding Up Intelligence – Data Summarization
15. Above and Beyond – Customization, Web Framework, HTTP Event Collector, REST API, and SDKs