Summary

In this chapter, we reviewed Splunk tables, charts, and fields and then explored the drilldown from within both tables and charts. The pivot and the pivot editor were discussed and finally we finished with the sparkline in our results.

In the next chapter, we will introduce Splunk lookups and explain the best practices, purpose, and use of this feature within Splunk solutions.

Get Mastering Splunk now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.