Summary

This was a very dense chapter, but we really just scratched the surface of a number of important topics. In future chapters, we will use these commands and techniques in more and more interesting ways. The possibilities can be a bit dizzying, so we will step through a multitude of examples to illustrate as many scenarios as possible.

Although some of the valuable new chart enhancements introduced in version 7.0 were touched upon in this chapter, we advise the reader to spend some more time (check out the examples in the downloadable Splunk 7.0 Overview App) experimenting with the power of these features, as they can immeasurably improve your Splunk visualizations.

In the next chapter, we will cover data models and pivots (covering ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.