Correlating Events with Transactions in Splunk

You will master how to correlate and group events in Splunk using transactions. Through many examples, you will learn how to generate reports and dashboards, extract fields, and compare alternative approaches to transactions.
Course info
Rating
(20)
Level
Intermediate
Updated
Oct 4, 2019
Duration
1h 35m
Table of contents
Description
Course info
Rating
(20)
Level
Intermediate
Updated
Oct 4, 2019
Duration
1h 35m
Description

Correlating events in Splunk is an essential skill every Splunk user must have. Unfortunately, identifying and employing the right SPL commands with appropriate options can be very difficult. In this course, Correlating Events with Transactions in Splunk, you will gain a foundational knowledge of Correlating techniques in Splunk using transactions. First, you will learn the transaction command and all its useful options. Next, you will discover the all-powerful rex command to extract fields and use them in transactions. Then, you will explore how to generate reports and dashboards using transaction results. Finally, you will also gain an understanding of alternative commands such as stats and join, and when to use them. When you’re finished with this course, you will have the skills and knowledge of correlating and grouping events needed to effectively make sense of your machine data.

About the author
About the author

Passionate about IT Ops, Karun has 20+ years of hands on experience with Linux, Cloud tech, Monitoring and Log aggregation. He enjoys creating learning materials that are engaging and provide immediate practical value.

More from the author
More courses by Karun Subramanian
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi everyone, my name is Karun Subramanian, and welcome to my course, Correlating Events with Transactions in Splunk. I am an IT operations expert, and a Splunk certified architect. This course is about showing you the Splunk techniques you can use to group and correlate events. We will primarily focus on the transaction command and all its useful options. I believe in learning through examples, so I have included plenty of examples for you to fully grasp the concepts. I've sprinkled many Splunk tips throughout the course. Some of the major topics that we will cover include understanding and using the transaction command, creating and scheduling reports and dashboards using the transaction results, using rex command to extract fields that you can use in the transaction command, compare alternative commands, such as stats and join. By the end of this course, you will know how to perform correlation in Splunk, a very important skill to have to make sense of your operational data. Before beginning the course, you should be familiar with basic SPL and Splunk search interface. I hope you'll join me on this journey to learn correlating events, with the Correlating Events with a Transaction in Splunk course, at Pluralsight.