Implementing Splunk 7, Third Edition

A comprehensive guide to making machine data accessible across the organization using advanced dashboards Key Features Enrich machine-generated data and transform it into useful, meaningful insights Perform search operations and configurations, build dashboards, and manage logs Extend Splunk services with scripts and advanced configurations to process optimal results Book DescriptionSplunk is the leading platform that fosters an efficient methodology and delivers ways to search, monitor, and analyze growing amounts of big data. This book will allow you to implement new services and utilize them to quickly and efficiently process machine-generated big data. We introduce you to all the new features, improvements, and offerings of Splunk 7. We cover the new modules of Splunk: Splunk Cloud and the Machine Learning Toolkit to ease data usage. Furthermore, you will learn to use search terms effectively with Boolean and grouping operators. You will learn not only how to modify your search to make your searches fast but also how to use wildcards efficiently. Later you will learn how to use stats to aggregate values, a chart to turn data, and a time chart to show values over time; you'll also work with fields and chart enhancements and learn how to create a data model with faster data model acceleration. Once this is done, you will learn about XML Dashboards, working with apps, building advanced dashboards, configuring and extending Splunk, advanced deployments, and more. Finally, we teach you how to use the Machine Learning Toolkit and best practices and tips to help you implement Splunk services effectively and efficiently. By the end of this book, you will have learned about the Splunk software as a whole and implemented Splunk services in your tasks at projects What you will learn Focus on the new features of the latest version of Splunk Enterprise 7 Master the new offerings in Splunk: Splunk Cloud and the Machine Learning Toolkit Create efficient and effective searches within the organization Master the use of Splunk tables, charts, and graph enhancements Use Splunk data models and pivots with faster data model acceleration Master all aspects of Splunk XML dashboards with hands-on applications Create and deploy advanced Splunk dashboards to share valuable business insights with peers Who this book is forThis book is intended for data analysts, business analysts, and IT administrators who want to make the best use of big data, operational intelligence, log management, and monitoring within their organization. Some knowledge of Splunk services will help you get the most out of the book

一本全面指南，教你如何使用高級儀表板使機器數據在組織中可訪問

主要特點：
- 豐富機器生成的數據，將其轉化為有用的、有意義的洞察力
- 執行搜索操作和配置，構建儀表板，管理日誌
- 通過腳本和高級配置擴展Splunk服務，以獲得最佳結果

書籍描述：
Splunk是一個領先的平台，促進了高效的方法論，並提供了搜索、監控和分析不斷增長的大數據的方法。本書將使您能夠實施新的服務並利用它們快速高效地處理機器生成的大數據。我們向您介紹Splunk 7的所有新功能、改進和提供。我們涵蓋了Splunk的新模塊：Splunk Cloud和機器學習工具包，以便更輕鬆地使用數據。此外，您還將學習如何有效使用布爾和分組運算符的搜索條件。您不僅將學習如何修改搜索以使搜索速度更快，還將學習如何有效使用通配符。稍後，您將學習如何使用統計信息來聚合值，使用圖表來轉換數據，使用時間圖表來顯示隨時間變化的值；您還將使用字段和圖表增強功能，並學習如何創建具有更快數據模型加速的數據模型。完成這些後，您將學習有關XML儀表板、應用程序操作、構建高級儀表板、配置和擴展Splunk、高級部署等方面的知識。最後，我們將教您如何使用機器學習工具包以及實施Splunk服務的最佳實踐和技巧。通過閱讀本書，您將全面了解Splunk軟件，並在項目任務中實施Splunk服務。

您將學到什麼：
- 關注Splunk Enterprise 7最新版本的新功能
- 掌握Splunk的新功能：Splunk Cloud和機器學習工具包
- 在組織內創建高效和有效的搜索
- 掌握Splunk表格、圖表和圖形增強功能的使用
- 使用Splunk數據模型和樞紐表進行更快的數據模型加速
- 通過實際應用創建和部署Splunk XML儀表板
- 創建和部署高級Splunk儀表板，與同事共享有價值的業務洞察力

本書適合對大數據、運營智能、日誌管理和監控感興趣的數據分析師、業務分析師和IT管理員。一些Splunk服務的知識將有助於您更好地利用本書。