EXPLORING WEB TRAFFIC
SPLUNK> Search & Reporting
SPL: index=main sourcetype=web_traffic
DTG: All Time
* the "selected fields" section represent basic metadata about the log file itself.
* The "interesting fields" contains fields that Splunk has automatically extracted
or manually added.
- fields prefixed with # (e.g., #date_hour) are automatically generated by Splunk's
time commands
- the presence of user_agent, path, and client_ip fields confirms the successful
parsing of the web log structure.
* The "Event details & field extraction" section shows the parsed details of a single
event with extracted fields such as user_agent, path, status, client_ip, etcLast updated