Splunk Search Expert 103

About this course

In this course, you will learn how to calculate co-occurrence between fields and analyze data from multiple datasets, increase your knowledge of searching and learn how to work with multivalue data. In addition, you will learn tips and tricks to improve search performance using accelerations.

What you will learn

• Use specific commands to calculate co-occurrence between fields and analyze data from multiple datasets.
• Understand how components of a search are broken down and processed across the Splunk data pipeline and how to troubleshoot searches.
• Manipulate, evaluate, and analyze multivalue data and create multivalue fields in search with multivalue eval commands and functions.
• Improve search performance by understanding search best practices, accelerating repots and data models to optimize frequently accessed data.