Leveraging Lookups and Subsearches
Duration : 1 Day (8 Hours)
Overview
Course Details
Prerequisites
Leveraging Lookups and Subsearches Course Overview:
This course is designed for power users who want to learn how to use lookups and subsearches to enrich their results. Topics will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources.
Intended Audience:
- Power users
- Data analysts
- Splunk enthusiasts seeking to improve data enrichment and correlation capabilities
Learning Objectives of Leveraging Lookups and Subsearches:
- Using Lookup Commands
- Adding a Subsearch
- Using the return Command
Topic 1 – Using Lookup Commands
- Understand lookups
- Use the inputlookup command to search lookup files
- Use the lookup command to invoke field value lookups
- Use the outputlookup command to create lookups
- Invoke geospatial lookups in search
Topic 2 – Adding a Subsearch
- Define subsearch
- Use subsearch to filter results
- Identify when to use subsearch
- Understand subsearch limitations and alternatives
Topic 3 – Using the return Command
- Use the return command to pass values from a subsearch
- Compare the return and fields commands
Leveraging Lookups and Subsearches Course Prerequisites:
To be successful, students should have a working understanding of
these courses:
- What is Splunk?
- Intro to Splunk
- Intro to Knowledge Objects
- Using Fields
Discover the perfect fit for your learning journey
Choose Learning Modality
Live Online
- Convenience
- Cost-effective
- Self-paced learning
- Scalability
Classroom
- Interaction and collaboration
- Networking opportunities
- Real-time feedback
- Personal attention
Onsite
- Familiar environment
- Confidentiality
- Team building
- Immediate application
Training Exclusives
This course comes with following benefits:
- Practice Labs.
- Get Trained by Certified Trainers.
- Access to the recordings of your class sessions for 90 days.
- Digital courseware
- Experience 24*7 learner support.
Got more questions? We’re all ears and ready to assist!