Leveraging Lookups and Subsearches

Upcoming Classes

Online

Instructor-led online training

Location	Jul 2022	Aug 2022	Sep 2022	Nov 2022
APAC Singapore - Virtual	Jul 8	Aug 5	Sep 14	Nov 4
APAC Sydney - Virtual	Jul 26	Aug 23
EMEA UK Time - Virtual	Jul 27

Summary

This three-hour course is designed for power users who want to learn how to use lookups and subsearches to enrich their results. Topics will focus on lookup commands and explore how to use subsearches to correlate and filter data from multiple sources.

Description

Using Lookup Commands
Adding a Subsearch
Using the return Command

Duration

3 hours

Objectives

Topic 1 – Using Lookup Commands

Understand lookups
Use the inputlookup command to search lookup files
Use the lookup command to invoke field value lookups
Invoke geospatial lookups in search

Topic 2 – Adding a Subsearch

Define subsearch
Use subsearch to filter results
Identify when to use subsearch
Understand subsearch limitations and alternatives

Topic 3 – Using the return Command

Use the return command to pass values from a subsearch
Compare the return and fields commands

Audience

Search Experts Knowledge Managers

Prerequisites

To be successful, students should have a solid understanding of the following:

How Splunk works
Creating Search queries
Lookups

Additional Notes

Individuals who enroll in this class will also be enrolled in an (eLearning with Labs) component. Completion of labs and quizzes is required in order to receive proof of completion.

Public Training

APAC Singapore - Virtual

Jul 8

9:00 AM - 12:00 PM SGT

$ 500.00 USD
Aug 5

9:00 AM - 12:00 PM SGT

$ 500.00 USD
Sep 14

9:00 AM - 12:00 PM SGT

$ 500.00 USD
Nov 4

9:00 AM - 12:00 PM SGT

$ 500.00 USD

APAC Sydney - Virtual

Jul 26

9:00 AM - 12:00 PM AEST

$ 500.00 USD
Aug 23

9:00 AM - 12:00 PM AEST

$ 500.00 USD

EMEA UK Time - Virtual

Jul 27

9:00 AM - 12:00 PM BST

$ 500.00 USD

Don't see a date that works for you?

Request Class

Leveraging Lookups and Subsearches

Leveraging Lookups and Subsearches