SlideShare a Scribd company logo
1 of 31
Download to read offline
|     |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)            | Help

Dashboards |        | Search |     | Reports |   | Visualizations |   |                                                                                       Application Settings




    Reports                                                                                                                               search for report

        Name                                            Last Run                 Results Date Range          # Results / Events   Time to run      Created By
         Events by time                                 March 3, 2008, 11:45     01/04/08 - 01/05/08         154
                                                                                 0:00 - 0:00
         Ports by firewall                              March 4, 2008, 11:45     01/04/08 - 01/05/08         124           Use as template        Edit Report            Run Report

         Application Configuration Change Report        March 5, 2008, 11:45                                 54

                   March 4, 2008, 11:45                                          01/04/08 - 01/05/08         124
                                                                                 01/04/08 - 01/05/08
                   March 5, 2008, 11:45                                                                      154

         Ports by firewall                              March 4, 2008, 11:45                                 124

         Application Configuration Change Report        March 5, 2008, 11:45                                 54

         example2.jpg                                   March 4, 2008, 11:45                                 124


         Selected items:         Delete Report     Assign to dashboard...                                                                               New Report


                                                                               ad-hoc vs. scheduled? scheduled or UI?
                                                                               upcoming? based on schedule
|     |                                                        Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |            | Search |   | Reports |   | Visualizations |   |                                               Application Settings

                                                                                                    Timeframe: Last 24 hours
 IP Address=Foo | Host=Bar                                                                                                         >
    Search assistance


  Save Search | Save as Alert | Export

Results




                                                                                                                     Report on results
|    |                                                                          Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |      | Visualizations |       |                                                         Application Settings


[ < Back to search results ]


Report on Results                                                                                                                     [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time


      Distribution                   SIMPLE                               Line       more



      Correlation


                                     SPLIT FIELD                          Stacked    more
      All report types                                                    Column




                                                                          Multiple   more
                                     MULTIPLE SERIES                      Column




     2: Map fields

    3: Format report


                                                                                                                      Cancel
|    |                                                                                        Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |      | Visualizations |       |                                                                       Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                   [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time


      Distribution                   SIMPLE                               Line       more



      Correlation

                                                                          Stacked           Stacked   Multiple          Multiple
      All report types               SPLIT FIELD                                            Area      Column            Line                      Table Only
                                                                          Column




                                                                          Multiple   more
                                     MULTIPLE SERIES                      Column




     2: Map fields

    3: Format report


                                                                                                                                    Cancel
|    |                                                                                       Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |      | Visualizations |       |                                                                      Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                  [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time


      Distribution                   SIMPLE                               Line      more



      Correlation

                                                                          Stacked          Stacked   Multiple          Multiple
      All report types               SPLIT FIELD                                           Area      Column            Line                      Table Only
                                                                          Column

                                            USE SPLIT FIELD IF...

                                           description description and description
                                                                       Multiple
                                           and and and description and description
                                                                                 more
                                     MULTIPLE SERIES                   Column
                                           description.




     2: Map fields

    3: Format report


                                                                                                                                   Cancel
|    |                                                                                        Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |      | Visualizations |       |                                                                       Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                   [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time


      Distribution                   SIMPLE                               Line       more



      Correlation

                                                                          Stacked           Stacked   Multiple          Multiple
      All report types               SPLIT FIELD                                            Area      Column            Line                      Table Only
                                                                          Column




                                                                          Multiple   more
                                     MULTIPLE SERIES                      Column




     2: Map fields

    3: Format report


                                                                                                                                    Cancel
|    |                                                                                                  Logged in as Username | Logout | Admin | Jobs (3)          | Help

Dashboards |         | Search |   | Reports |      | Visualizations |     |                                                                                        Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                 [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time
                                     SIMPLE                       SPLIT FIELD                                               MULTIPLE SERIES

      Distribution                                                description description and description and and           description description and description and and
                                                Line              and description and description description.              and description and description description.

      Correlation
                                                                              Stacked                 Multiple                         Multiple                Multiple
                                                Area                          Column                  Column                           Column                  Line
      All report types

                                                                              Stacked                 Multiple
                                                Column                        Area                    Line                             Table Only



                                                                              Table Only
                                                Table Only




     2: Map fields

    3: Format report


                                                                                                                                                    Cancel
|    |                                                                                                  Logged in as Username | Logout | Admin | Jobs (3)          | Help

Dashboards |         | Search |   | Reports |      | Visualizations |     |                                                                                        Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                 [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time
                                     SIMPLE                       SPLIT FIELD                                               MULTIPLE SERIES

      Distribution                                                description description and description and and           description description and description and and
                                                Line              and description and description description.              and description and description description.

      Correlation
                                                                              Stacked                 Multiple                         Multiple                Multiple
                                                Area                          Column                  Column                           Column                  Line
      All report types

                                                                              Stacked                 Multiple
                                                Column                        Area                    Line                             Table Only



                                                                              Table Only
                                                Table Only




     2: Map fields

    3: Format report


                                                                                                                                                    Cancel
|    |                                                                                                  Logged in as Username | Logout | Admin | Jobs (3)          | Help

Dashboards |         | Search |   | Reports |      | Visualizations |     |                                                                                        Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                 [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time
                                     SINGLE SERIES                SPLIT SERIES                                              MULTIPLE SERIES

      Distribution                                                description description and description and and           description description and description and and
                                                Line              and description and description description.              and description and description description.

      Correlation
                                                                              Stacked                 Multiple                         Multiple                Multiple
                                                Area                          Column                  Column                           Column                  Line
      All report types

                                                                              Stacked                 Multiple
                                                Column                        Area                    Line                             Table Only



                                                                              Table Only
                                                Table Only




     2: Map fields

    3: Format report


                                                                                                                                                    Cancel
|    |                                                                                        Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |          | Visualizations |     |                                                                     Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                   [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time
                                     TOP / RARE VALUES                               CONTINGENCY TABLE

      Distribution
                                                 Bar                        Pie              Heat Map                Bubble ???

      Correlation

                                                 Column                     Donut            Table Only
      All report types


                                                 Table Only




                                   For distribution over time. see Trend over time




     2: Map fields

    3: Format report


                                                                                                                                    Cancel
|    |                                                                                          Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |   | Reports |          | Visualizations |     |                                                                       Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                     [ Advanced ]

    1: Choose report type (don't worry, you can always change it later)

      Trend over time
                                     SINGLE SERIES                          MULTIPLE SERIES

      Distribution
                                                                                     Multiple     Scatter
                                                 Bar                                 Column

      Correlation

                                                 Table Only                          Table Only
      All report types




                                   For correlation over time. see Trend over time




     2: Map fields

    3: Format report


                                                                                                                                      Cancel
|    |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |    | Reports |        | Visualizations |       |                                                                                  Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                 [ Advanced ]

    1: Choose report type:                 trend over time . split field


     2: Map fields
                                       y-axis field                                        secondary / split by field
      show      count             of    enter field name or click to see all fields   by   enter field name                               over TIME


    3: Format report


                                                                                                                                                  Cancel
|    |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |    | Reports |        | Visualizations |       |                                                                                  Application Settings


[ < Back to search results ]


Report on Results                                       y-axis:
                                                                                                                                                                  [ Advanced ]
                                                        y-axis                   secondary / split by
                                                        field                    field values
    1: Choose report type:                 trend over time . split field . stacked column
                                                                     x-axis: Time
     2: Map fields
                                       y-axis field                                        secondary / split by field
      show      count             of    enter field name or click to see all fields   by   enter field name                               over TIME


    3: Format report


                                                                                                                                                  Cancel
|    |                                                                                                Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |    | Reports |        | Visualizations |    |                                                                               Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                           [ Advanced ]

    1: Choose report type:                  trend over time . split field


     2: Map fields
                                       y-axis field                                  secondary / split by field
      show      count             of    |                                       by   enter field name                               over TIME


    3: Format report


                                                                                                                                            Cancel
|                     |                                                                                                  Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |                          | Search |    | Reports |        | Visualizations |      |                                                                               Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                              [ Advanced ]

    1: Choose report type:                                   trend over time . split field


     2: Map fields
                                                        y-axis field                                    secondary / split by field
      show count                                   of    cookies                                   by    enter field name                              over TIME


     3: Format results                        Enter secondary / split by field to format results

        Chart (Preview)

        Count of Cookies vs. Time
                cookies (count)




      Table             [ Show | Hide ]



                                                                                                                                                               Cancel
|                              |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |   | Reports |      | Visualizations |    |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                            [ Advanced ]

    1: Choose report type:                                                                trend over time . split field


     2: Map fields
                                                                                     y-axis field                                  secondary / split by field
      show distinct count                                                          of cookies                                 by    file                                          over TIME


     3: Format results
        Chart (Preview) Run chart to see the actual data.

                     Display as:                                                                                                                                                                   Chart Options


                         Count of Cookies vs. Time by File
                                       cookies (distinct count)
        cookies (distinct count)




        Time


      Table                                    [ Show | Hide ]



                                                                                                                                                                                          Cancel              Run & Save
|                              |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |   | Reports |      | Visualizations |    |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                            [ Advanced ]

    1: Choose report type:                                                                trend over time . split field


     2: Map fields
                                                                                     y-axis field                                  secondary / split by field
      show distinct count                                                          of cookies                                 by    file                                          over TIME


     3: Format results
        Chart (Preview) Run chart to see the actual data.

                     Display as:                                                                                                                                                                   Chart Options

                                                                                                                                                                                            Scale
                         Count of Cookies vs. Time by File                                                                                                                                  Linear | Logarithmic

                                                                                                                                                                                            Null Values
                                                                                                                                                                                            Suppress | Display
                                       cookies (distinct count)
        cookies (distinct count)




                                                                                                                                                                                            Flip axes




        Time


      Table                                    [ Show | Hide ]



                                                                                                                                                                                          Cancel              Run & Save
|                              |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |       | Reports |            | Visualizations |   |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                                     [ Advanced ]

    1: Choose report type:                                                                       trend over time . split field


     2: Map fields
                                                                                          y-axis field                                      secondary / split by field
      show distinct count                                                              of cookies                                      by    file                                          over TIME


     3: Format results
        Chart (Preview) Run chart to see the actual data.

                     Display as:                                                                                                                                                                            Chart Options


                         Count of Cookies vs. Time by File

                                                                                     changes will result in
                                                                      Time Axis      preview. You will need to run
                                                                                     the chart to see actual data.
                                       cookies (distinct count)
        cookies (distinct count)




                                                                       Label
                                                                       Time


                                                                       Time range
                                                                       1/1/08 - 1/1/09

                                                                       Time span for each bucket / bin
                                                                       2                  day(s)

                                                                        = 182 buckets / bins
                                                                           MAX = 300 buckets


        Time
                                                                            Cancel                  Save
      Table                                    [ Show | Hide ]



                                                                                                                                                                                                   Cancel              Run & Save
|                              |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |   | Reports |      | Visualizations |    |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                            [ Advanced ]

    1: Choose report type:                                                                trend over time . split field


     2: Map fields
                                                                                     y-axis field                                  secondary / split by field
      show distinct count                                                          of cookies                                 by    file                                          over TIME


     3: Format results
        Chart (Preview) Run chart to see the actual data.

                     Display as:                                                                                                                                                                   Chart Options


                         Count of Cookies vs. Time by File
                                       cookies (distinct count)




                                                                                                                                                                  File 1           [ Show | Hide ]
        cookies (distinct count)




                                                                                                                                                                  Label
                                                                                                                                                                   File 1


                                                                                                                                                                  Color




        Time                                                                                                                                                           Cancel           Save

      Table                                    [ Show | Hide ]



                                                                                                                                                                                          Cancel              Run & Save
|                              |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |   | Reports |      | Visualizations |    |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                            [ Advanced ]

    1: Choose report type:                                                                trend over time . split field


     2: Map fields
                                                                                     y-axis field                                  secondary / split by field
      show distinct count                                                          of cookies                                 by    file                                          over TIME


     3: Format results
        Chart (Preview) Run chart to see the actual data.

                     Display as:                                                                                                                                                                   Chart Options


                         Count of Cookies vs. Time by File
                                       cookies (distinct count)
        cookies (distinct count)




        Time


      Table                                    [ Show | Hide ]



                                                                                                                                                                                          Cancel              Run & Save
|                              |                                                       Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |                                                           | Search |   | Reports |   | Visualizations |   |                                             Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                         [ back to Simple view ]

 WARNING: Not all commands are available in the simple view and ...

 IP Address=Foo | Host=Bar                                                                                                                                                       >
     Reporting assistance

  Timeframe: Last 24 hours


   Chart (Preview) Run chart to see the actual data.


                          Count of Cookies vs. Time by File
                                        cookies (distinct count)
         cookies (distinct count)




         Time


   Table                            [ Show | Hide ]



                                                                                                                                                     Cancel          Run & Save
|                              |                                                                                             Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                                          | Search |   | Reports |      | Visualizations |    |                                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                                                                                            [ Advanced ]

    1: Choose report type:                                                                trend over time . split field


     2: Map fields
                                                                                     y-axis field                                  secondary / split by field
      show distinct count                                                          of cookies                                 by    file                                          over TIME


     3: Format results
        Chart

                     Display as:                                                                                                                                                                   Chart Options


                         Count of Cookies vs. Time by File
                                       cookies (distinct count)
        cookies (distinct count)




        Time


      Table                                    [ Show | Hide ]



                                                                                                                                                                                          Cancel                   Save
|    |                                                                   Logged in as Username | Logout | Admin | Jobs (3)      | Help

Dashboards |         | Search |         | Reports |         | Visualizations |   |                                             Application Settings


[ < Back to search results ]
                                    Search generated: 08/09/08: 09:00
Report on Results                   String=ValidForUseCase                                                                 Save / Publish
                                     [ < Back to search results ]
                                                                                                                                [ Advanced ]
1 Choose report type           (don't worry, you can always change it later)




  Table Only          Timechart               Other Chart
|     |                                                                                                 Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |            | Search |   | Reports |   | Alerts |   | Visualizations |    |                                                                          Application Settings

                                                                                                                                             Timeframe: Last 24 hours
 IP Address=Foo | Host=Bar                                                                                                                                                  >
    Search assistance


  Save Search | Save as Alert | Export

Results




                                                                                                                                                          analyze / chart results




                                                                            Report on Field
                                                                            Distribution
                                                                            Top Values | Rare Values | Contingency Table
                                                                            Correlation
                                                                            Single Series | Multiple Series
                                                                            Trend over time
                                                                            Single Series | Split Series | Multiple Series
|     |                                                                          Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |            | Search |   | Reports |   | Alerts |   | Visualizations |     |                                                  Application Settings

                                                                                                                      Timeframe: Last 24 hours
 IP Address=Foo | Host=Bar                                                                                                                           >
    Search assistance


  Save Search | Save as Alert | Export

Results




                                                                                                                                   analyze / chart results




                                                                            Report on Field
                                                                            Trend over time
                                                                            Distribution
                                                                            Correlation
|     |                                                                                                 Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |            | Search |   | Reports |   | Alerts |   | Visualizations |     |                                                                         Application Settings

                                                                                                                                             Timeframe: Last 24 hours
 IP Address=Foo | Host=Bar                                                                                                                                                  >
    Search assistance


  Save Search | Save as Alert | Export

Results




                                                                                                                                                          analyze / chart results




                                                                            Report on Field
                                                                            Trend over time
                                                                            Distribution      Top Values | Rare Values | Contingency Table
                                                                            Correlation
|    |                                                                                   Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |    | Reports |        | Visualizations |   |                                                                   Application Settings


[ < Back to search results ]


Report on Results                                                                                                                              [ Advanced ]

    1: Choose report type:                 single series correlation


     2: Map fields
                                       y-axis field                                   x-axis field
      show      count             of                                           over   File


    3: Format report


                                                                                                                               Cancel

More Related Content

Similar to Splunk | Reporting - Concepts 2

Solutions for Sage Customers from Robert Lavery
Solutions for Sage Customers from Robert LaverySolutions for Sage Customers from Robert Lavery
Solutions for Sage Customers from Robert Lavery
Suzanne Spear
 
Common System Parameters
Common System ParametersCommon System Parameters
Common System Parameters
Roman Agaev
 
6.Live Framework 和Mesh Services
6.Live Framework 和Mesh Services6.Live Framework 和Mesh Services
6.Live Framework 和Mesh Services
GaryYoung
 
Splunk 5 Overview Analyst v1.0
Splunk 5 Overview Analyst v1.0Splunk 5 Overview Analyst v1.0
Splunk 5 Overview Analyst v1.0
Splunk
 
Whats New At Qad(8.6toe B2.1)
Whats New At Qad(8.6toe B2.1)Whats New At Qad(8.6toe B2.1)
Whats New At Qad(8.6toe B2.1)
shashikantgp
 

Similar to Splunk | Reporting - Concepts 2 (20)

Visão completa do ADAudit Plus
Visão completa do ADAudit PlusVisão completa do ADAudit Plus
Visão completa do ADAudit Plus
 
Solutions for Sage Customers from Robert Lavery
Solutions for Sage Customers from Robert LaverySolutions for Sage Customers from Robert Lavery
Solutions for Sage Customers from Robert Lavery
 
Monitoring An Enterprise Uc Environment
Monitoring An Enterprise Uc EnvironmentMonitoring An Enterprise Uc Environment
Monitoring An Enterprise Uc Environment
 
Common System Parameters
Common System ParametersCommon System Parameters
Common System Parameters
 
Jaspersoft and Clarity PPM - Advanced Reporting with Data Warehouse
Jaspersoft and Clarity PPM - Advanced Reporting with Data WarehouseJaspersoft and Clarity PPM - Advanced Reporting with Data Warehouse
Jaspersoft and Clarity PPM - Advanced Reporting with Data Warehouse
 
6.Live Framework 和Mesh Services
6.Live Framework 和Mesh Services6.Live Framework 和Mesh Services
6.Live Framework 和Mesh Services
 
Excel Audit Software Aditya Presentations In Agra
Excel Audit Software   Aditya Presentations In AgraExcel Audit Software   Aditya Presentations In Agra
Excel Audit Software Aditya Presentations In Agra
 
FMK2016 - Vince Menanno - Auditing
FMK2016 - Vince Menanno - AuditingFMK2016 - Vince Menanno - Auditing
FMK2016 - Vince Menanno - Auditing
 
Document
DocumentDocument
Document
 
Analyzing OTM Logs and Troubleshooting
Analyzing OTM Logs and TroubleshootingAnalyzing OTM Logs and Troubleshooting
Analyzing OTM Logs and Troubleshooting
 
Sumo Logic Quickstart Training 10/14/2015
Sumo Logic Quickstart Training 10/14/2015Sumo Logic Quickstart Training 10/14/2015
Sumo Logic Quickstart Training 10/14/2015
 
267_20230812_ClubServicenow_License_Subscription.pdf
267_20230812_ClubServicenow_License_Subscription.pdf267_20230812_ClubServicenow_License_Subscription.pdf
267_20230812_ClubServicenow_License_Subscription.pdf
 
FlexNet Delivery and FlexNet Operations On-Demand Tips & Tricks
FlexNet Delivery and FlexNet Operations On-Demand Tips & TricksFlexNet Delivery and FlexNet Operations On-Demand Tips & Tricks
FlexNet Delivery and FlexNet Operations On-Demand Tips & Tricks
 
Splunk 5 Overview Analyst v1.0
Splunk 5 Overview Analyst v1.0Splunk 5 Overview Analyst v1.0
Splunk 5 Overview Analyst v1.0
 
Software architecture unit 4
Software architecture unit 4Software architecture unit 4
Software architecture unit 4
 
Whats New At Qad(8.6toe B2.1)
Whats New At Qad(8.6toe B2.1)Whats New At Qad(8.6toe B2.1)
Whats New At Qad(8.6toe B2.1)
 
Java micro-services
Java micro-servicesJava micro-services
Java micro-services
 
Dms Batch Reporting
Dms Batch ReportingDms Batch Reporting
Dms Batch Reporting
 
Tableau training course
Tableau training courseTableau training course
Tableau training course
 
Community Tenure Recording Training Material Web Admin – User Training
Community Tenure Recording Training Material  Web Admin – User Training Community Tenure Recording Training Material  Web Admin – User Training
Community Tenure Recording Training Material Web Admin – User Training
 

More from Beth Goldman

User Experience @InsideView
User Experience @InsideViewUser Experience @InsideView
User Experience @InsideView
Beth Goldman
 
InsideView | UI Screens + Notes
InsideView | UI Screens + NotesInsideView | UI Screens + Notes
InsideView | UI Screens + Notes
Beth Goldman
 
Splunk | Reporting Final Comps
Splunk | Reporting Final CompsSplunk | Reporting Final Comps
Splunk | Reporting Final Comps
Beth Goldman
 
Splunk | Save Report Use Cases
Splunk | Save Report Use CasesSplunk | Save Report Use Cases
Splunk | Save Report Use Cases
Beth Goldman
 
Splunk | Charting Rules
Splunk | Charting RulesSplunk | Charting Rules
Splunk | Charting Rules
Beth Goldman
 
Splunk | Reporting Usability Tasks
Splunk | Reporting Usability TasksSplunk | Reporting Usability Tasks
Splunk | Reporting Usability Tasks
Beth Goldman
 
Splunk | Change Management App Wireframes
Splunk | Change Management App WireframesSplunk | Change Management App Wireframes
Splunk | Change Management App Wireframes
Beth Goldman
 
Splunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use CasesSplunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use Cases
Beth Goldman
 
Splunk | UI Messaging Spec
Splunk | UI Messaging SpecSplunk | UI Messaging Spec
Splunk | UI Messaging Spec
Beth Goldman
 
Splunk | Reporting Use Cases
Splunk | Reporting Use CasesSplunk | Reporting Use Cases
Splunk | Reporting Use Cases
Beth Goldman
 
Intuit | Husky Ui Spec
Intuit | Husky Ui SpecIntuit | Husky Ui Spec
Intuit | Husky Ui Spec
Beth Goldman
 
Splunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD UpdatesSplunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD Updates
Beth Goldman
 
Splunk | Use Case Training
Splunk | Use Case TrainingSplunk | Use Case Training
Splunk | Use Case Training
Beth Goldman
 
Y! Travel | Optimization Project Goals
Y! Travel | Optimization Project GoalsY! Travel | Optimization Project Goals
Y! Travel | Optimization Project Goals
Beth Goldman
 
Y! Travel | UE Optimization Summary
Y! Travel | UE Optimization SummaryY! Travel | UE Optimization Summary
Y! Travel | UE Optimization Summary
Beth Goldman
 
Y! Travel UE Schedule
Y! Travel UE ScheduleY! Travel UE Schedule
Y! Travel UE Schedule
Beth Goldman
 
Intuit | Husky Design Review Presentation
Intuit | Husky Design Review PresentationIntuit | Husky Design Review Presentation
Intuit | Husky Design Review Presentation
Beth Goldman
 
Y! Travel | Research Synthesis
Y! Travel | Research SynthesisY! Travel | Research Synthesis
Y! Travel | Research Synthesis
Beth Goldman
 
Intuit | Husky E2E Tollgate Presentation
Intuit | Husky E2E Tollgate PresentationIntuit | Husky E2E Tollgate Presentation
Intuit | Husky E2E Tollgate Presentation
Beth Goldman
 
Intuit | Control Spending Focus Group Findings
Intuit | Control Spending Focus Group FindingsIntuit | Control Spending Focus Group Findings
Intuit | Control Spending Focus Group Findings
Beth Goldman
 

More from Beth Goldman (20)

User Experience @InsideView
User Experience @InsideViewUser Experience @InsideView
User Experience @InsideView
 
InsideView | UI Screens + Notes
InsideView | UI Screens + NotesInsideView | UI Screens + Notes
InsideView | UI Screens + Notes
 
Splunk | Reporting Final Comps
Splunk | Reporting Final CompsSplunk | Reporting Final Comps
Splunk | Reporting Final Comps
 
Splunk | Save Report Use Cases
Splunk | Save Report Use CasesSplunk | Save Report Use Cases
Splunk | Save Report Use Cases
 
Splunk | Charting Rules
Splunk | Charting RulesSplunk | Charting Rules
Splunk | Charting Rules
 
Splunk | Reporting Usability Tasks
Splunk | Reporting Usability TasksSplunk | Reporting Usability Tasks
Splunk | Reporting Usability Tasks
 
Splunk | Change Management App Wireframes
Splunk | Change Management App WireframesSplunk | Change Management App Wireframes
Splunk | Change Management App Wireframes
 
Splunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use CasesSplunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use Cases
 
Splunk | UI Messaging Spec
Splunk | UI Messaging SpecSplunk | UI Messaging Spec
Splunk | UI Messaging Spec
 
Splunk | Reporting Use Cases
Splunk | Reporting Use CasesSplunk | Reporting Use Cases
Splunk | Reporting Use Cases
 
Intuit | Husky Ui Spec
Intuit | Husky Ui SpecIntuit | Husky Ui Spec
Intuit | Husky Ui Spec
 
Splunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD UpdatesSplunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD Updates
 
Splunk | Use Case Training
Splunk | Use Case TrainingSplunk | Use Case Training
Splunk | Use Case Training
 
Y! Travel | Optimization Project Goals
Y! Travel | Optimization Project GoalsY! Travel | Optimization Project Goals
Y! Travel | Optimization Project Goals
 
Y! Travel | UE Optimization Summary
Y! Travel | UE Optimization SummaryY! Travel | UE Optimization Summary
Y! Travel | UE Optimization Summary
 
Y! Travel UE Schedule
Y! Travel UE ScheduleY! Travel UE Schedule
Y! Travel UE Schedule
 
Intuit | Husky Design Review Presentation
Intuit | Husky Design Review PresentationIntuit | Husky Design Review Presentation
Intuit | Husky Design Review Presentation
 
Y! Travel | Research Synthesis
Y! Travel | Research SynthesisY! Travel | Research Synthesis
Y! Travel | Research Synthesis
 
Intuit | Husky E2E Tollgate Presentation
Intuit | Husky E2E Tollgate PresentationIntuit | Husky E2E Tollgate Presentation
Intuit | Husky E2E Tollgate Presentation
 
Intuit | Control Spending Focus Group Findings
Intuit | Control Spending Focus Group FindingsIntuit | Control Spending Focus Group Findings
Intuit | Control Spending Focus Group Findings
 

Splunk | Reporting - Concepts 2

  • 1. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports search for report Name Last Run Results Date Range # Results / Events Time to run Created By Events by time March 3, 2008, 11:45 01/04/08 - 01/05/08 154 0:00 - 0:00 Ports by firewall March 4, 2008, 11:45 01/04/08 - 01/05/08 124 Use as template Edit Report Run Report Application Configuration Change Report March 5, 2008, 11:45 54 March 4, 2008, 11:45 01/04/08 - 01/05/08 124 01/04/08 - 01/05/08 March 5, 2008, 11:45 154 Ports by firewall March 4, 2008, 11:45 124 Application Configuration Change Report March 5, 2008, 11:45 54 example2.jpg March 4, 2008, 11:45 124 Selected items: Delete Report Assign to dashboard... New Report ad-hoc vs. scheduled? scheduled or UI? upcoming? based on schedule
  • 2. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Timeframe: Last 24 hours IP Address=Foo | Host=Bar > Search assistance Save Search | Save as Alert | Export Results Report on results
  • 3. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time Distribution SIMPLE Line more Correlation SPLIT FIELD Stacked more All report types Column Multiple more MULTIPLE SERIES Column 2: Map fields 3: Format report Cancel
  • 4. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time Distribution SIMPLE Line more Correlation Stacked Stacked Multiple Multiple All report types SPLIT FIELD Area Column Line Table Only Column Multiple more MULTIPLE SERIES Column 2: Map fields 3: Format report Cancel
  • 5. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time Distribution SIMPLE Line more Correlation Stacked Stacked Multiple Multiple All report types SPLIT FIELD Area Column Line Table Only Column USE SPLIT FIELD IF... description description and description Multiple and and and description and description more MULTIPLE SERIES Column description. 2: Map fields 3: Format report Cancel
  • 6. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time Distribution SIMPLE Line more Correlation Stacked Stacked Multiple Multiple All report types SPLIT FIELD Area Column Line Table Only Column Multiple more MULTIPLE SERIES Column 2: Map fields 3: Format report Cancel
  • 7. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time SIMPLE SPLIT FIELD MULTIPLE SERIES Distribution description description and description and and description description and description and and Line and description and description description. and description and description description. Correlation Stacked Multiple Multiple Multiple Area Column Column Column Line All report types Stacked Multiple Column Area Line Table Only Table Only Table Only 2: Map fields 3: Format report Cancel
  • 8. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time SIMPLE SPLIT FIELD MULTIPLE SERIES Distribution description description and description and and description description and description and and Line and description and description description. and description and description description. Correlation Stacked Multiple Multiple Multiple Area Column Column Column Line All report types Stacked Multiple Column Area Line Table Only Table Only Table Only 2: Map fields 3: Format report Cancel
  • 9. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time SINGLE SERIES SPLIT SERIES MULTIPLE SERIES Distribution description description and description and and description description and description and and Line and description and description description. and description and description description. Correlation Stacked Multiple Multiple Multiple Area Column Column Column Line All report types Stacked Multiple Column Area Line Table Only Table Only Table Only 2: Map fields 3: Format report Cancel
  • 10. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time TOP / RARE VALUES CONTINGENCY TABLE Distribution Bar Pie Heat Map Bubble ??? Correlation Column Donut Table Only All report types Table Only For distribution over time. see Trend over time 2: Map fields 3: Format report Cancel
  • 11. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type (don't worry, you can always change it later) Trend over time SINGLE SERIES MULTIPLE SERIES Distribution Multiple Scatter Bar Column Correlation Table Only Table Only All report types For correlation over time. see Trend over time 2: Map fields 3: Format report Cancel
  • 12. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show count of enter field name or click to see all fields by enter field name over TIME 3: Format report Cancel
  • 13. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results y-axis: [ Advanced ] y-axis secondary / split by field field values 1: Choose report type: trend over time . split field . stacked column x-axis: Time 2: Map fields y-axis field secondary / split by field show count of enter field name or click to see all fields by enter field name over TIME 3: Format report Cancel
  • 14. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show count of | by enter field name over TIME 3: Format report Cancel
  • 15. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show count of cookies by enter field name over TIME 3: Format results Enter secondary / split by field to format results Chart (Preview) Count of Cookies vs. Time cookies (count) Table [ Show | Hide ] Cancel
  • 16. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart (Preview) Run chart to see the actual data. Display as: Chart Options Count of Cookies vs. Time by File cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ] Cancel Run & Save
  • 17.
  • 18. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart (Preview) Run chart to see the actual data. Display as: Chart Options Scale Count of Cookies vs. Time by File Linear | Logarithmic Null Values Suppress | Display cookies (distinct count) cookies (distinct count) Flip axes Time Table [ Show | Hide ] Cancel Run & Save
  • 19. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart (Preview) Run chart to see the actual data. Display as: Chart Options Count of Cookies vs. Time by File changes will result in Time Axis preview. You will need to run the chart to see actual data. cookies (distinct count) cookies (distinct count) Label Time Time range 1/1/08 - 1/1/09 Time span for each bucket / bin 2 day(s) = 182 buckets / bins MAX = 300 buckets Time Cancel Save Table [ Show | Hide ] Cancel Run & Save
  • 20. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart (Preview) Run chart to see the actual data. Display as: Chart Options Count of Cookies vs. Time by File cookies (distinct count) File 1 [ Show | Hide ] cookies (distinct count) Label File 1 Color Time Cancel Save Table [ Show | Hide ] Cancel Run & Save
  • 21.
  • 22. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart (Preview) Run chart to see the actual data. Display as: Chart Options Count of Cookies vs. Time by File cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ] Cancel Run & Save
  • 23.
  • 24. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ back to Simple view ] WARNING: Not all commands are available in the simple view and ... IP Address=Foo | Host=Bar > Reporting assistance Timeframe: Last 24 hours Chart (Preview) Run chart to see the actual data. Count of Cookies vs. Time by File cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ] Cancel Run & Save
  • 25. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: trend over time . split field 2: Map fields y-axis field secondary / split by field show distinct count of cookies by file over TIME 3: Format results Chart Display as: Chart Options Count of Cookies vs. Time by File cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ] Cancel Save
  • 26.
  • 27. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Search generated: 08/09/08: 09:00 Report on Results String=ValidForUseCase Save / Publish [ < Back to search results ] [ Advanced ] 1 Choose report type (don't worry, you can always change it later) Table Only Timechart Other Chart
  • 28. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Alerts | | Visualizations | | Application Settings Timeframe: Last 24 hours IP Address=Foo | Host=Bar > Search assistance Save Search | Save as Alert | Export Results analyze / chart results Report on Field Distribution Top Values | Rare Values | Contingency Table Correlation Single Series | Multiple Series Trend over time Single Series | Split Series | Multiple Series
  • 29. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Alerts | | Visualizations | | Application Settings Timeframe: Last 24 hours IP Address=Foo | Host=Bar > Search assistance Save Search | Save as Alert | Export Results analyze / chart results Report on Field Trend over time Distribution Correlation
  • 30. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Alerts | | Visualizations | | Application Settings Timeframe: Last 24 hours IP Address=Foo | Host=Bar > Search assistance Save Search | Save as Alert | Export Results analyze / chart results Report on Field Trend over time Distribution Top Values | Rare Values | Contingency Table Correlation
  • 31. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings [ < Back to search results ] Report on Results [ Advanced ] 1: Choose report type: single series correlation 2: Map fields y-axis field x-axis field show count of over File 3: Format report Cancel