Splunk Best Practices - Softcover

Marlette, Travis

Softcover

ISBN 10: 1785281399 ISBN 13: 9781785281396

Publisher: Packt Publishing, 2016

Synopsis

Design, implement, and publish custom Splunk applications by following best practices This book is for administrators, developers, and search ninjas who have been using Splunk for some time. A comprehensive coverage makes this book great for Splunk veterans and newbies alike. This book will give you an edge over others through insights that will help you in day-to-day instances. When you're working with data from various sources in Splunk and performing analysis on this data, it can be a bit tricky. With this book, you will learn the best practices of working with Splunk. You'll learn about tools and techniques that will ease your life with Splunk, and will ultimately save you time. In some cases, it will adjust your thinking of what Splunk is, and what it can and cannot do. To start with, you'll get to know the best practices to get data into Splunk, analyze data, and package apps for distribution. Next, you'll discover the best practices in logging, operations, knowledge management, searching, and reporting. To finish off, we will teach you how to troubleshoot Splunk searches, as well as deployment, testing, and development with Splunk. If you're stuck or want to find a better way to work with Splunk environment, this book will come handy. This easy-to-follow, insightful book contains step-by-step instructions and examples and scenarios that you will connect to.

About this title

About the Author

Travis Marlette Travis Marlette has been working with Splunk since Splunk 4.0, and has over 7 years of statistical and analytical experience leveraging both Splunk and other technologies. He cut his teeth in the securities and equities division of the finance industry, routing stock market data and performing transactional analysis on stock market trading, as well as reporting security metrics for SEC and other federal audits. His specialty is in IT operational intelligence, which consists of the lions share of many major companies. Being able to report on security, system-specific, and propriety application metrics is always a challenge for any company and with the increase of IT in the modern day, having a specialist like this will become more and more prominent. Working in finance, Travis has experience of working to integrate Splunk with some of the newest and most complex technologies, such as: . SAS . HIVE . TerraData (Data Warehouse) . Oozie . EMC (Xtreme IO) . Datameer . ZFS . Compass . Cisco (Security/Network) . Platfora . Juniper (Security and Network) . IBM Web Sphere . Cisco Call Manager . Java Management Systems (JVM) . Cisco UCS . IBM MQ Series . FireEye . Microsoft Active Directory . Snort . Microsoft Exchange . F5 . Microsoft – OS . MapR (Hadoop) . Microsoft SQL . YARN (Hadoop) . Microsoft SCOM . NoSQL . Linux (Red Hat / Cent OS) . Oracle . MySQL . Nagios . LDAP . TACACS+ . ADS . Kerberos . Gigamon . Telecom Inventory Management . Riverbed Suite . Endace . Service Now JIRA . Confluence Travis is has been certified for a series of Microsoft, Juniper, Cisco, Splunk, and network security certifications. His knowledge and experience is truly his most valued currency, and this is demonstrated by every organization that has worked with him to reach their goals. He has worked with Splunk installations that ingest 80 to 150 GB daily, as well as 6 TB daily, and provided value with each of the

Edition details

• Publisher: Packt Publishing
• Publication date: 2016
• Language: English
• ISBN 10: 1785281399
• ISBN 13: 9781785281396
• Binding: Paperback
• Number of pages: 244