Summary

The key takeaways from this chapter are as follows:

  • Use lookup tables to add more user-friendly data to search results
  • Create state tables that can track data over long periods of time
  • Create workflow actions that can link to external resources that can't be added in lookup tables
  • Automate tasks such as opening helpdesk tickets using data extracted from Splunk
  • The DB Connect application allows for a powerful connectivity between external databases or between ODBC/JDBC data stores and Splunk

Get Splunk Operational Intelligence Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.