Chris Grech, one of our regular members/attendees, will be discussing how Splunk indexes and retrieves events and how to craft your SPL to take advantage of this process for blazing-fast searches. From real-world examples on popular log sources to best and worst practices, there will be plenty of ideas to take home and try in your own environment.

Please note that our venue sponsor (AWS Canberra) requires that visitors to their venue be registered. This process will be a lot faster if you preregister for the event before COB Wednesday June 4. And please bring photo ID.

Note: Any content presented at this event cannot be recorded, shared, or published without written approval from the content owner. This event is for Splunk customers & users only. Journalists and media publications are expressly forbidden from using any content from this event for publishing purposes.