Splunk / Result Modification

This three-hour course is for power users who want to use commands to manipulate output and normalize data. Topics will focus on specific commands for manipulating fields and field values and modifying result sets. Additionally, students will learn how to use specific eval command functions to normalize fields and field values across multiple data sources.