Summary

This was a very dense chapter, but we really just scratched the surface of a number of important topics. In future chapters, we will use these commands and techniques in more and more interesting ways. The possibilities can be a bit dizzying, so we will step through a multitude of examples to illustrate as many scenarios as possible.

Although some of the valuable new chart enhancements introduced in version 7.0 were touched upon in this chapter, we advise the reader to spend some more time (check out the examples in the downloadable Splunk 7.0 Overview App) experimenting with the power of these features, as they can immeasurably improve your Splunk visualizations.

In the next chapter, we will cover data models and pivots (covering a definition of each), the pivot editor, pivot elements and filters, and sparklines.