Result Modification is a Splunk Education course that covers the wide range of SPL commands available for transforming and reshaping search results.
What You Will Learn
- Use eval to create calculated fields, apply conditional logic, and format data values
- Apply field manipulation commands including rename, fields, table, and dedup
- Use string and mathematical functions within eval expressions
- Sort, filter, and paginate results using sort, where, head, and tail
- Convert data types and work with time-based eval functions for temporal analysis
Who Should Attend
Splunk users and analysts who want to move beyond basic searches to produce clean, well-formatted results for reports and dashboards.
Prerequisites
Completion of Splunk Fundamentals 1 or equivalent hands-on experience with Splunk search.
