Tutorials_World_Splunk_Chapters_16-20

 Contents

1 SPLUNK 16. Fine tuning inputs 1

1.1 PART - 69 | Fine Tuning Inputs 1

1.2 PART - 70 | All about the input phase 1

2 SPLUNK 17. Parsing Phase and Data 4

2.1 PART - 71 | Parsing Phase and Data 4

2.2 PART - 72 | Understand the default processing that occurs during parsing 4

2.3 PART - 73 | Use Data Preview to validate event creation during the parsing phase demo 7

3 SPLUNK 18. Manipulating Raw Data 8

3.1 PART - 74 | Manipulating Raw Data 8

3.2 PART - 75 | Why transform and mask data 8

3.3 PART - 76 | Use transformations with props conf and transforms conf 10

3.4 PART - 77 | Use SEDCMD to modify raw data 13

3.5 PART - 78 | Demo Use SEDCMD to modify raw data 15

4 SPLUNK 19. Conclusion 15