Event correlation enables you to find relationships between seemingly unrelated events in data from multiple sources and to understand which events are most relevant. Splunk correlations can provide functionality similar to sophisticated event management or correlation systems. You can also automate the results of correlations to generate alerts or support business metrics, leading to better business decisions and Operational Intelligence.
Event correlation enables you to find relationships between seemingly unrelated events in data from multiple sources and to understand which events are most relevant. Splunk correlations can provide functionality similar to sophisticated event management or correlation systems. You can also automate the results of correlations to generate alerts or support business metrics, leading to better business decisions and Operational Intelligence.
This three-hour course is for power users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.
Skills Covered
Please refer to course overview.
Who Should Attend
Search Experts Knowledge Managers.
Course Curriculum
Prerequisites
To be successful, students should have a solid understanding of the following: