HYBRID: DASUG 2nd-Tuesday Apr 12 presents: Summary Index w/ tstats: How to do it RIGHT @ UTD ROC

Dallas Area Splunk User Group

April 12, 2022, 11:00 PM UTC – April 13, 2022, 2:00 AM UTC

23
RSVPs

About this event

WE ARE HAVING TWO EVENTS THIS MONTH!

Why? Because we are continuing our regular 2nd-Tuesday cadence AND we will be participating in the 2022 "Global Splunk User Group Week" which falls outside of our cadence as the 1st-week of April.

The traditional and documented ways of adding data to Summary Index are not conducive to optimal leveraging with tstats. By using a few clever macros, you can send events to a Summary Index so that almost everything is tstats-able WITHOUT doing index-time field extractions. Learn how to do this simple magic trick!

This will be BOTH a virtual event AND a live event @
UTD ROC building Rio Grande Conference Room 2.102
17217 Waterview Pkwy, Dallas, TX 75252, USA
DISPLAY PARKING PASS!

SPECIAL PARKING NOTE: Each visitor must display a temporary parking permit during our meeting which will shortly be available in the google drive folder link at the bottom. Be sure to only park in the “green” or “visitor” spaces as indicated: https://drive.google.com/file/d/1HVWwqh7OAhB0P5uOZTl2o63q5FMie-of

Feel free to start the conversation early in the #dallas channel of splunk-usergroups.slack.com (sign up with http://splk.it/slack).

Agenda

11:00 PMSoft Start
11:30 PMHard Start
12:30 AMQandA
1:00 AMFree Time