Home > Vendors > splunk > splk-cfe

SPLK-CFE - Creating Field Extractions

This three-hour course is for knowledge managers who want to learn about field extraction and the Field Extractor (FX) utility. Topics will cover when certain fields are extracted and how to use the FX to create regex and delimited field extractions.

Code: splk-cfe

Duration: 3.0 hours

Enquire Now

Start learning today!

Click Hereto customize your Training

Objectives

Use the Field Extractor
Create Regex Field Extractions
Create Delimited Field Extractions

Content

Topic 1 – Using the Field Extractor

Understand types of extracted fields and when they are extracted
Explore the Splunk Web Field Extractor (FX)

Topic 2 – Creating Regex Field Extractions

Identify basics of regular expressions (regex)
Understand the regex field extraction workflow
Edit regex for field extractions

Topic 3 – Creating Delimited Field Extractions

Identify delimited field values in event data
Understand the delimited field extraction workflow

Audience

Splunk Administrator
Developer
User
Knowledge Manager
Architect

Prerequisites

To be successful, students should have completed the following courses:

Search Under the Hood
Multi-value Fields
Creating Knowledge Objects

Certification

Course Benefits

Career growth
Broad Career opportunities
Worldwide recognition from leaders
Up-to Date technical skills
Popular Certification Badges

Splunk Popular Courses

splk-dyd

This course focuses on creating inputs, chain searches, event annotations, and improving dashboard performance.

splk-introdyd

This course focuses on dashboard creation, including prototyping, the dashboard definition, layouts types, adding visualizations, and dynamic coloring.

splk-lls

This course will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources

splk-wtime

This course will focus on searching and formatting time in addition to using time commands and working with time zones.

Subtotal