Talk Details

What’s in my Data? Field Analysis for the Advanced Engineer

Wouldn’t it be handy to know what fields are available in your data, what values they contain, and where they’re defined in the ocean of .conf files? What if I told you we could do that, and more, using nothing but standard SPL search commands? Join me in this technical deep dive where we’ll explore the methodology used in these utility queries built for this purpose step by step, complete with take-home references that’ll help give you confidence when it comes time to decide which fields fit your needs and, hopefully, teach you a few new SPL tricks along the way. Let’s work smarter, and take the term “fieldsummary” to the next level.


Ryan Wood


Video PowerPoint Github