Apr 12, 2022, 11:00 PM – Apr 13, 2022, 2:00 AM (UTC)
The documented way of adding data to Summary Index are not optimal to leverage w/ tstats. A few macros can send events to SI so that almost everything is tstats-able WITHOUT anything extra! Come learn exactly how! This will be BOTH a virtual event AND a live event @ UTD ROC building Rio Grande Conference Room (room 2.102) 17217 Waterview Pkwy, Dallas, TX 75252, USA. DISPLAY PARKING PASS!
WE ARE HAVING TWO EVENTS THIS MONTH!
Why? Because we are continuing our regular 2nd-Tuesday cadence AND we will be participating in the 2022 "Global Splunk User Group Week" which falls outside of our cadence as the 1st-week of April.
The traditional and documented ways of adding data to Summary Index are not conducive to optimal leveraging with tstats. By using a few clever macros, you can send events to a Summary Index so that almost everything is tstats-able WITHOUT doing index-time field extractions. Learn how to do this simple magic trick!
This will be BOTH a virtual event AND a live event @
UTD ROC building Rio Grande Conference Room 2.102
17217 Waterview Pkwy, Dallas, TX 75252, USA
DISPLAY PARKING PASS!
SPECIAL PARKING NOTE: Each visitor must display a temporary parking permit during our meeting which will shortly be available in the google drive folder link at the bottom. Be sure to only park in the “green” or “visitor” spaces as indicated: https://drive.google.com/file/d/1HVWwqh7OAhB0P5uOZTl2o63q5FMie-of
Feel free to start the conversation early in the #dallas channel of splunk-usergroups.slack.com (sign up with http://splk.it/slack).
Splunxter, Inc.
President
Splunxter, Inc.
President
April 12 – 13, 2022
11:00 PM – 2:00 AM (UTC)
| 11:00 PM | Soft Start |
| 11:30 PM | Hard Start |
| 12:30 AM | QandA |
| 1:00 AM | Free Time |
Contact Us
