2 hours 29 minutes
Hello and thanks for coming back.
I'm Natasha, and in the section, we're gonna answer the deceptively simple question of
what ISS Blunt
*** is. A company worth several $1,000,000,000 based out of San Francisco. It specializes in DD use In processing.
Split has multiple different products, But when you refer to just ***, people most often think of the *** platform and its core capabilities. Or they may just think about whatever they have set up at their company.
Splunk Enterprise. Blunt Cloud *** Free and *** light make up what is thought of as a sponsor platform,
and future videos will discuss the differences between these and talk about other products.
Course will focus on the common uses of the popular ***, enterprise and *** free and briefly cover the capabilities of other products that typically build on these platforms.
The company sums up his purpose as
***, turns machine data into answers
to dig a little deeper.
Splunk software aggregates processes, analyzes and help to use small the massive amounts of data.
It's particularly helpful for turning unstructured data in the usable information.
Some examples include ingesting authentication logs and alerting when there have been high volume failures.
Or he could collect Web traffic data and provide statistics on visitor activity.
Another example would be story instance like data until an admin search for information to troubleshoot a problem,
you could retrieve mouth or alerts and correlated with other activity.
Or use a look up to define error codes and organize a problem and human readable format.
Gather I ot data and provide meaningful metrics, Soren store information required for an audit and tons of other uses.
Splunk has a strong community built around its product, including forums, conferences and even local events. In many places, it's growth have exploded over the last few years, but it's found her back in 2003.
The easiest way to get a grasp on *** might be to take a quick look.
He's a relatively empty instance of spoiling enterprise. I have running our virtual machine.
I am searching for some data
just traffic on this machine, and I found 320 events in the last hour.
We're gonna look at a single event here, can pull this up and see the raw text
so this itself would be hard for us to work with
but our D. C. Here it breaks it out into different fields that I can then use
for other tasks.
So right here I could run a simple search Where I look at how many events have happened
in this data.
Ah, by app.
There we are.
So now we've got to our quiz. True or false *** can only handle parse data.
The answer is false. Swank is great for organizing raw data.
Some of what we've learned in this section. Spong takes data that's difficult to handle, maybe because there's so much of it or because it's unorganized or a meaningless on its own, and make that usable in a variety of ways, such as for reporting, alerting troubleshooting for hunting, making business decisions and so on.
In the next video, we're gonna be talking about *** in your career.
Thanks for watching
Splunk online test helps to assess knowledge of Splunk which is an advanced, scalable and ...
Event Log Collection
In this lab you will use Splunk Enterprise to ingest logs from a local host ...