Good to learn how to "think splunk".

This book helps you understand how Splunk> works, how to "think Splunk>". It does walk you through a number of scenarios with mostly publicly available data. Many scenarios are probably not what you want to use in your environment (flight data, twitter data, foursquare data), but that's not the intention either. It is to showcase Both possibilities with and handling of Splunk>. All the scenarios include information on how to get the input / sample data, how to make it available to Splunk> and the how to dig for the golden nuggets of information in it. The text points out again and again how important it is to understand your LogData, and yes, as someone working with Splunk> professionally, I agree This can not be stressed enough.

There are many monochrome screenshots to show what is being done, Which is good. But sometimes colored images would be easier to follow, Especially When some Resulting charts are shown. Some screenshots are not too easy to decipher, there are a few mistakes in the text and therefore someother rough edges, but it's not too bad. While I think the topic about clustering Splunk> at the end of the book is Positioned Well, I personally think the introduction to forwarders Should Have Come Towards the beginning, not the end. After all, you may want to get started with your own projects already while working through the book.

The appendix dealing with performance is rather vague and the appendix listing some of the apps may be outdated Quickly, but it does give some idea what there is in terms of add ons. The book only scratches the surface of the available commands and does not give any lists or tables of what commands, etc. are available in evals Splunk>, but then again, it is not a tutorial or Product Documentation, but a selection of scenarios to Showcase Approaches and the way of thinking and exploring required to make you a successful Splunk> user or admin.

If you are new to Splunk>, do not think you'll know all there is to know after reading this book, you'll need other information too. But for getting info and samples how to wrap your head around the logs and data "Splunk> way", I think the book is worth its price.