Once, when I picked up a book from the local library, the librarian asked to tell her what I thought about the book when I would bring it back. Well, why not write a few lines about all the books I read so everybody could see what I thought about it? I'm often also happy to have friends recommend a certain book or tell me this and that is not really worth reading. I won't comment about the tons of books I have read so far, but about books I read from now on.
| highly recommended | sehr empfohlen | |
| good reading | gutes lesematerial | |
| average | durchschnittlich | |
| not too interesting | nicht allzu interessant | |
| recommended not to read it | empfehlung das buch nicht zu lesen |
 |
|
|---|---|
| title | Advanced Splunk |
| author | Ashish Kumar and Tulsiram Yadav |
| ISBN-10 | 1-785-88435-2 |
| ISBN-13 | 978-1-785-88435-1 |
| ASIN | |
| rating | |
| date | 2017-Mar-07 |
As the title already suggests, this is not a book for the splunk> novice. You should already know the basics, such as how to install splunk> and how to make it run, as well as how to basically import data.
The splunk> version used for all samples is 6.3 and the three big topics (but not the only ones covered) are data analytics, visualizations and dashboards. The authors do a fine job explaining. When they write about a feature, they explain what it does, provide a sample implementation, have relevant screenshots so the reader can see what they are talking about and they not only print the code for implementing the feature, but also annotate the code. These annotations are very helpful to understand what is going on, what portion in the code is linked to which other part and where changes must be made. It is these good explanations and well commented code fragments, which I find most useful.
In my opinion this is a good book to have around so you can quickly look up how to implement visualization and dashboard features you don't use every day and have a clear explanation with good samples in no time. Valuable enough to order an extra paper copy for the office.
