Chris Barrett will be running us through the use of Regular Expressions (RegEx) at search time to enable the extraction of fields from events, and to allow for the filtering of events within SPL.

Please note that our venue sponsor (AWS Canberra) requires that visitors to their venue be registered. This process will be a lot faster if you preregister for the event before COB Wednesday December 4. And please bring photo ID.

Note: Any content presented at this event cannot be recorded, shared, or published without written approval from the content owner. This event is for Splunk customers & users only. Journalists and media publications are expressly forbidden from using any content from this event for publishing purposes.