|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/splunk-search-expert-103
课程评论：没有评论
课程名称：Splunk 搜索专家 103 课程概述：本课程将教您如何计算字段之间的共现性以及分析来自多个数据集的数据，提升您对搜索的理解，并学习如何处理多值数据。此外，您将学习一些提升搜索性能的技巧和窍门，包括使用加速功能。 课程大纲： 1. **关联分析** - 描述：此模块适合希望学习如何计算字段之间共现性并分析来自多个数据集的数据的用户。主要内容包括事务、追加、追加列、联合和连接命令。 2. **搜索背后的原理** - 描述：该电子学习模块为学生提供了有关Splunk如何处理搜索的额外见解。学生将了解Splunk架构，搜索组件如何在管道中被分解和分发，以及如何在未返回预期结果时排除搜索故障。 3. **多值字段** - 描述：此模块适合希望成为多值数据搜索和处理专家的用户。内容将集中于使用多值评估函数和多值命令来创建、评估和分析多值数据。 4. **搜索优化** - 描述：此模块适合希望提升搜索性能的用户。内容将涵盖搜索模式如何影响性能、如何创建高效的基本搜索、如何加速报告和数据模型以及如何使用tstats命令快速查询数据。 通过本课程，您将掌握Splunk搜索的高级技巧，提升数据分析能力。
Name:Correlation Analysis
Description:This module is for users who want to learn how to calculate co-occurrence between fields and analyze data from multiple datasets. Topics will focus on the transaction, append, appendcols, union, and join commands.
Name:Search Under the Hood
Description:This eLearning module gives students additional insight into how Splunk processes searches. Students will learn about Splunk architecture, how components of a search are broken down and distributed across the pipeline, and how to troubleshoot searches when results are not returning as expected.
Name:Multivalve Fields
Description:This module is for users who want to become experts on searching and manipulating multivalue data. Topics will focus on using multivalue eval functions and multivalue commands to create, evaluate, and analyze multivalue data.
Name:Search Optimization
Description:This module is for users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data.
In this course, you will learn how to calculate co-occurrence between fields and analyze data from multiple datasets, increase your knowledge of searching and learn how to work with multivalue data. In addition, you will learn tips and tricks to improve search performance using accelerations.
