Overview

This three-hour course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions.

Skills Covered

Please refer to course overview.

Who Should Attend

Search Experts Knowledge Managers.

Course Curriculum

Prerequisites

To be successful, students should have a solid understanding of the following:

  • How Splunk works
  • Knowledge Objects

Download Syllabus

Course Modules