Splunk Operational Intelligence Cookbook - Second Edition by Josh Diakun & Paul R Johnson & Derek Mock

Author:Josh Diakun & Paul R Johnson & Derek Mock [Diakun, Josh]
Language: eng
Format: azw3
Publisher: Packt Publishing
Published: 2016-06-08T04:00:00+00:00

This recipe further familiarized you with the Pivot interface. Directly selecting the Error data model object filtered the data to just the web access data containing errors, due to the constraints defined within the object. From here, you leveraged Pivot to count status codes over time in one hour increments. This is similar to doing a | timechart span=1h count by status search at the end of a filtered search. Selecting to visualize this data in a line chart helps to easily identify the various status codes over time and can clearly illustrate error spikes or increases over a specific time period.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.