Splunk Operational Intelligence Cookbook

Summary

The key takeaways from this chapter are as follows:

• There are many ways to analyze data aside from looking at events individually
• Adding contexts to events by converging data sources provides immense value
• Building transactions leads to a better understanding of user, system, and application behavior
• Using statistics to assess abnormalities in your events can lead to a more proactive issue identification
• Predictive analytics provides more conclusive evidence to assist with resource planning and threshold tuning