trainocate-splunk-training-b
Home > Vendors > splunk > splk-cval

SPLK-CVAL - Comparing Values

Overview

Duration: 3.0 hours

This three-hour course is for power users who want to learn how to compare field values using eval functions and eval expressions. Topics will focus on using the comparison, conditional, and text functions of the eval command, creating eval expressions, managing missing data, the field format command, the where command, and the fill null command.

Objectives

  • Using eval to Compare
  • Filtering with where & Managing Missing Data

Content

Topic 1 – Using Eval to Compare

  • Explore the eval command
  • Explain evaluation functions
  • Identify and use comparison, conditional, and text functions
  • Normalize data with the case function
  • Use the field format command to format field values

Topic 2 – Filtering with Where & Managing Missing Data

  • Use the where command to filter results
  • Use wildcards with the where command
  • Filter fields with the information functions, is null and is not null
  • Manage missing data with the fill null command

Audience

  • Splunk Administrator
  • Developer
  • User
  • Knowledge Manager
  • Architect

Prerequisites

To be successful, students should have a working understanding of these courses:

  • What is Splunk?
  • Intro to Splunk
  • Using Fields

Certification

Schedule




Enquire Now
q1CJzG
By clicking "Submit", I agree to the Terms Of Use and Privacy Policy