Getting Started With Tstats & Accelerated Data Models – Part 3

Once your data model has been accelerated it is time to start writing SPL queries to take advantage of the recently accelerated data. There are many methods to doing this, but we’ll assume you don’t know how to write a proper tstats query at this point and take the path of least resistance. SPL & Stuff It should be noted that I've accelerated [...]

Read more

Getting Started With Tstats & Accelerated Data Models – Part 2

You’ve decided tstats and DMA is a good fit for you, or at least worth checking out. Excellent, let’s jump right into it! Web analytics, now faster! In this example [...]

Getting Started With Tstats & Accelerated Data Models – Part 1

If you haven’t used tstats and data model acceleration (DMA) yet, it’s time to start! Splunk slides aren’t marketing fluff claiming false information regarding DMA and [...]

Splunk Certification Program Relaunch

Splunk Announcement If you haven't heard yet, there is a major re-work of Splunk Certifications. Splunk announced a major upgrade to their certification program. This [...]

Torture the Data and it will Confess to Anything

Welcome to blogs.gosplunk.com! This is the all encompassing area where we take a deep dive into various experiments, guides, and just all around geeky things that don't fit [...]