Expanded Library
Knowledge Manager 101
This course prepares you to build and maintain knowledge objects for a Splunk Enterprise Implementation. You will learn to use knowledge objects to normalize and enrich event data, extract fields, optimize searches, and will show you how to provide access to your users.
What you'll learn
This course prepares you to build and maintain knowledge objects for a Splunk Enterprise Implementation. You will learn to use knowledge objects to normalize and enrich event data, extract fields, optimize searches, and will show you how to provide access to your users.
Table of contents
Intro to Knowledge Objects
11mins
Creating Knowledge Objects
28mins
Creating Field Extractions
11mins
Enriching Data with Lookups
25mins
Data Models
32mins
Search Optimization
53mins
Introduction to Dashboards
84mins
- Splunk Dashboard Framework 7m
- Dashboard Definition 2m
- Making a Plan 1m
- Creating a Prototype 2m
- Troubleshooting 2m
- Creating a Dashboard 15m
- Visual vs. Source Editor 7m
- Layout Settings 6m
- Working with Visualizations 10m
- Adding a Drilldown 3m
- Customizing Backgrounds 4m
- Dynamic Coloring 13m
- Dynamic Coloring: Tables 7m
- Dynamic Coloring: Single Value 5m