Duane Waddle

A Blargh

Month: May 2014

Splunk – bucket lexicons and segmentation

2014-05-112014-08-31 Duane 7 Comments Splunk

About Segmentation Event segmentation is an operation key to how Splunk processes your data as it is being both indexed and searched.  At index time, the segmentation configuration determines what rules Splunk uses to extract segments (or tokens) from the raw event and store them as entries in the lexicon.  Understanding the relationship between what’s […]

Continue reading


Search for:

Recent Posts

  • Use this one weird trick to add a Splunk login banner
  • An evening with SVD-2022-0607
  • Splunk UF 9.0 and POSIX Capabilities
  • New Host, lost some comments
  • Searching date-time values in Splunk

Recent Comments

  • Steve Scott on Splunk UF 9.0 and POSIX Capabilities
  • Duane on An evening with SVD-2022-0607
  • Matt Lucas on An evening with SVD-2022-0607
  • Graham Schuckman on New Host, lost some comments
  • Taruchit Goyal on Proving a Negative

Archives

  • April 2025
  • November 2022
  • June 2020
  • November 2019
  • May 2019
  • January 2019
  • September 2018
  • July 2018
  • July 2017
  • March 2015
  • February 2015
  • October 2014
  • May 2014
  • April 2014

Categories

  • Splunk
  • Uncategorized

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
dazzling Theme by Colorlib Powered by WordPress