Using Splunk search commands: transaction, append and appendcols

Автор: Travis Hall

Загружено: 2023-09-26

Просмотров: 1413

Описание: In the video you will see me use 3 Splunk search commands: transaction, append and appendcols.

The first command I will cover is the “transaction” search command to create a field called duration that will help me understand how long an interface on my firewall box is down. Using the transaction search command helped me discover that my em2 interface was changing stats multiple times each day.

With that information I start using both the “append” and “apendcols” command to merge the opnsense data with Windows eventlogs to discover what is causing the frequent status changes. This helped me understand that when putting my computer to sleep or waking the computer up, my firewall box will log that as a status change on the interface.

Splunk documentation links:

Splunk Transaction search command:
https://docs.splunk.com/Documentation...

Splunk Append search command:
https://docs.splunk.com/Documentation...

Splunk Appendcols search command:
https://docs.splunk.com/Documentation...

Не удается загрузить Youtube-плеер. Проверьте блокировку Youtube в вашей сети.
Повторяем попытку...

Using Splunk search commands: transaction, append and appendcols

Доступные форматы для скачивания:

Скачать видео

Информация по загрузке:

Скачать аудио

Похожие видео

Using Splunk to search, alert and visualize metrics data being collected in a metrics based index

Using Splunk to search, alert and visualize metrics data being collected in a metrics based index

Команды Splunk: подробное обсуждение команд, связанных с многозначными полями

Команды Splunk: подробное обсуждение команд, связанных с многозначными полями

Part 2 - Azure Data Engineering | End to End | Azure Pipeline

Part 2 - Azure Data Engineering | End to End | Azure Pipeline

Splunk Transaction Command | Tech Tonic With Kiran

Splunk Transaction Command | Tech Tonic With Kiran

Basic setup of a Splunk Deployment Server to push out technology add-ons and custom apps

Basic setup of a Splunk Deployment Server to push out technology add-ons and custom apps

Splunk Commands : How

Splunk Commands : How "transaction" command works

Мощнейший удар по флоту и авиации РФ / Улицы столицы перекрыты

Мощнейший удар по флоту и авиации РФ / Улицы столицы перекрыты

Минимизируйте неэффективные поиски в Splunk

Минимизируйте неэффективные поиски в Splunk

Микросервисы VS Монолит | Просто о сложном

Микросервисы VS Монолит | Просто о сложном

Splunk Commands :

Splunk Commands : "append" vs "appendpipe" vs "appendcols" commands detail explanation

Transform Your Splunk Skills with the Eval Command!

Transform Your Splunk Skills with the Eval Command!

Splunk Dashboard Studio pass a token to another dashboard, including inputs such as a multiselect

Splunk Dashboard Studio pass a token to another dashboard, including inputs such as a multiselect

Using Splunk ITSI with SNMP, NetFlow and Windows Sysmon data to identify high bandwidth utilization.

Using Splunk ITSI with SNMP, NetFlow and Windows Sysmon data to identify high bandwidth utilization.

append, appendcols vs join | Tech Tonic with Kiran

append, appendcols vs join | Tech Tonic with Kiran

Splunk: Обсуждение «Подпоиска»

Splunk: Обсуждение «Подпоиска»

Почему реактивный двигатель не плавится? [Veritasium]

Почему реактивный двигатель не плавится? [Veritasium]

Deep House Mix 2024 | Deep House, Vocal House, Nu Disco, Chillout Mix by Diamond #3

Deep House Mix 2024 | Deep House, Vocal House, Nu Disco, Chillout Mix by Diamond #3

Pass a drilldown token from one Splunk dashboard to another dashboard

Pass a drilldown token from one Splunk dashboard to another dashboard

Splunk Search / Where Command SPL

Splunk Search / Where Command SPL

Совет Мира и НЛО. Гадкий Эндрю. Русские на олимпиаде. Запад повторяет ошибки 38 года. Гитлер, Сталин

Совет Мира и НЛО. Гадкий Эндрю. Русские на олимпиаде. Запад повторяет ошибки 38 года. Гитлер, Сталин