Splunk Operational Intelligence Cookbook - Third Edition

Discovering anomalous values

With the volume of data ever increasing, looking for events that are outliers is becoming more difficult and requires different techniques for their detection. The value of identifying these values is that it can lead to the identification of a resource issue, highlight malicious activities hidden within high volumes of events, or simply detect users attempting to interact with the application in a way they were not designed to. Capitalize on these opportunities to capture the abnormalities and triage them accordingly.