Result Modification with Splunk Micro-badge

Program Requirements

By completing this single-subject course, microbadge earners have the knowledge of how to use commands to manipulate output and normalize data. Additionally, badge earners have learned how to use specific eval command functions to normalize fields and field values across multiple data sources.

Outcomes/Objectives

Upon completion students will be able to create and understand:

• Use the untable, xyseries, appendpipe, eventstats, and streamstats commands

• Modify result sets and use the eval command and eval functions to manipulate field values

• Normalize data across multiple data sources

Earning Requirements

To receive a credential, students must complete the following:

• Labs

• Course Content

• Quiz

This Splunk single-subject microbadge counts toward earning the Search Expert learning path badge.

Program Duration

3 hours