implementing-splunk-7-third-edition's Introduction

Implementing Splunk 7 - Third Edition

This is the code repository for Implementing Splunk 7 - Third Edition, published by Packt. It contains all the supporting project files necessary to work through the book from start to finish.

About the Book

This book will help you implement Splunk 7's new services and will show you how to utilize them to quickly and efficiently process machine-generated big data. You will explore Splunk Cloud and the Machine Learning Toolkit and use them with ease throughout your organization. By the end of the book, you will have learned to implement these services in your tasks at work.r

Instructions and Navigation

All of the code is organized into folders. Each folder starts with a number followed by the application name. For example, Chapter02.

The following code bundle contains a data generator which can be used to test the queries given in the book. However, since the data is randomly generated, not all queries will work as expected and you may have to modify them accordingly.

You can find the steps to upload the dataset, ImplementingSplunkDataGenerator demo app in Chapter 1 under Data generator section

Accordingly the use of other files is mentioned, as and when needed, in individual chapters of the book.

None of the chapters have code files, all required support files are present in the bundle.

The code will look like the following:

sourcetype="impl_splunk_gen" ip="*"
| rex "ip=(?P<subnet>\d+\.\d+\.\d+)\.\d+"
| table ip subnet

To start with the book, you will first need to download Splunk from https://www.splunk.com/en_us/download.html. You can find the official installation manual at http://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements.

packtsnehalt / implementing-splunk-7-third-edition Goto Github PK