This course teaches different methods of parsing and manipulating data in Splunk at index-time. It covers all aspects in the parsing phase of data and teaches you to customize the process through examining, analysing, and transforming the data.
This course teaches different methods of parsing and manipulating data in Splunk at index-time. It covers all aspects in the parsing phase of data and teaches you to customize the process through examining, analysing, and transforming the data.
Data onboarding in an accurate and efficient manner is the key to timely and reliable monitoring and analysis in Splunk Enterprise.
In this course, Splunk Enterprise Administration: Parsing and Manipulating Data, you’ll learn different methods and techniques to parse and manipulate data at index-time in Splunk.
First, you’ll explore different techniques and options for parsing data while indexing, applying appropriate configuration settings.
Next, you’ll discover how to deal with situations that require extracting custom fields and timestamps as well as overriding the default fields.
Finally, you’ll learn how to route data to specific indexes and filter or mask the event data based on specific criteria.
When you’re finished with this course, you’ll have the skills and knowledge of Splunk Enterprise administration, parsing and manipulating data needed to deploy suitable techniques for handling, parsing and manipulating data while ingesting into Splunk.
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.