Now we are already committed to understanding Splunk and becoming the Splunk master.
We will see how we can get help when we get stuck at any stage of Splunk learning or implementation
or operations.
The first option of help, as we saw earlier, was under Splunk.
Dua We have seen this earlier, which lists all the resources necessary for learning or troubleshooting
Splunk.
The second and probably the best place is the Splunk answers.
That is answers to Splunk dot com.
We know that by now that it is kind of a Stack Overflow for Splunk related queries, which is highly
active community where a lot of people contribute to exchange and share knowledge.
And the third is the Splunk IRC channel.
I'll just quickly show you how we can use Splunk IRC channel.
It is basically on if net.
Let me type in just a minute.
This is an IFC channel where as to Splunk is your Splunk channel.
Just give whatever the name you want.
And Click Login.
It will be connecting you to the Splunk channel where a lot of Splunk gurus and you'll get probably
faster responses.
It will be like a chatting application where you can raise any queries and you can type in something
and send it and somebody will respond.
Regarding the Splunk or what is the latest version?
Any bugs they have found, what are the issues?
Or how you can troubleshoot or how you can configure a few of the things?
A lot of these people are highly active during the US business hours.
The rest of the time it is kind of slow, but Splunk answers on the other side.
You will get answers to your queries at any moment of that time.
Let me log out of I.R.S..
And we'll go back to our slides.
Now we have seen Splunk as Sea Channel.
The next is the Splunk documentation.
Which is the best and accurate place.
For learning or troubleshooting about Splunk?
Probably not for troubleshooting, for learning because the most of the documentation is open and available
publicly for everyone.
It is doc start splunk dot com.
If you are looking for a Splunk Enterprise, it is doc store splunk dot com.
Let me type it for you.
Docs dot splunk dot com slash.
Documentation will take you directly to your Splunk Enterprise.
If you want to just click click on Splunk Enterprise, just type on Salon.com, you'll be taken to Splunk
Enterprise.
Click on this core product, Splunk Enterprise.
You'll be taken to all the documentations which are related to Splunk Enterprise.
You'll get.
Accurate information.
Most efficient.
And it's totally free.
You can download any manual, whichever you want in the form of PDF, or you can download by selecting
specific topic and downloading the mass PDF.
The most important one, which I keep handy every time, is search and reporting search reference manual
because I can't remember 140 plus comment.
I use this manual to quickly search for the syntax of the commands or which commands best fits my present
requirement.
The second one, which usually follows the admin manual with these two, will be my two tabs and my
operations every day because you'll get this good menu called configuration file reference with example
syntax that needs to be configured and a short description of what each configuration file is.
You can find all this in your Splunk package, which your downloaded for installation, but I feel this.
The example menu, which shows what it does and what information it contains, will be highly resourceful
during the implementation or configuration.
This is the admin menu and configuration file reference.
The second one, which I use most commonly, is the search reference, which again as search commands.
These are 140 plus commands since in the previous video we have seen like the top command or do I do
if I want to know more about top, I search for top.
Click on that command.
And it will display me complete syntax.
Small description and examples of that command, which is huge for learning Splunk.
Troubleshooting Splunk, you can see any commands that are practically in this product.
In domes for free.
This documentation site is the most accurate and probably you should make the best use of these documentations.
Let's go back to our slides.
So the next one is the Splunk support.
That is, of course, the paid support, which comes as part of your license in case if you are stuck
and there is a business disruption or business impact that is happening, you're not able to resolve
the issue.
You can raise a call with Splunk by calling them or by emailing them or with your customer portal.
You can log in incident response back to you on the best possible way, that is with the Splunk support.
But my experience working on this product is 80% of the time you'll find answers from the documentation
side or Splunk answers Dotcom.
These two are your best friends for learning Splunk or troubleshooting Splunk.
If you can't find answers, then these two portals, it's probably a product bug, in which case the
Splunk support will come into picture to identify the bug or provide a workaround for these information.
Can be obtained in answers to Splunk dot com and.
Dot dot splunk dot com.
It should be able to resolve your 80% of the issues are regarding implementation or learning.