Comparing Values with Splunk Micro-badge

Program Requirements

By completing this single-subject course, microbadge earners understand how to compare field values using eval functions and eval expressions.

Outcomes/Objectives

• Explain evaluation functions

• Identify and use comparison, conditional, and text functions

• Normalize data with the case function

• Use the fieldformat command to format field values

• Use the where command to filter results

• Use wildcards with the where command

• Filter fields with the information functions, isnull and isnotnull

• Manage missing data with the fillnull command

This Splunk single-subject microbadge counts toward earning the Search Expert learning path badge.

Earning Requirements

• Module 1 and 2

• Relevant quizzes and labs

Program Duration

3 hours