Getting ready

To step through this recipe, you will need a running Splunk Enterprise server, with the sample data loaded from Chapter 1, Play Time - Getting Data In, and to have completed all of the recipes from Chapter 2, Diving into Data - Search and Report. You should be familiar with navigating the Splunk user interface.