Implementing Splunk: Big Data Reporting and Development for Operational Intelligence

Conventions

In this book, you will find a number of styles of text that distinguish between different kinds of information. Here are some examples of these styles, and an explanation of their meaning.

Code words in text are shown as follows: "."

A block of code is set as follows:

index=myapplicationindex
(
  sourcetype=security
  AND
  (
    (bob NOT error)
    OR
    (mary AND warn)
  )
)

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

<searchPostProcess>
  timechart span=1h sum(count) as "Error count" by network
</searchPostProcess>
<title>Dashboard - Errors - errors by network timechart</title>

Any command-line input or output is written as follows:

ERROR LogoutClass error, ERROR, Error! [user=mary, ...