Skip to main content

Splunk Training + Certification

Statistical Processing

Course Description

This three-hour course is for power users who want to identify and use transforming commands and eval functions to calculate statistics on their data. Topics will cover data series types, primary transforming commands, mathematical and statistical eval functions, using eval as a function, and the rename and sort commands.

Instructor-led Training Schedule

eLearning with Labs

The best of both delivery methods. Self-paced eLearning videos accessible anytime, anywhere, plus access to the interactive lab environment to sharpen your skills.


Prerequisite Knowledge

To be successful, students should have a solid understanding of the

  • How Splunk works
  • Creating search queries

Course Topics

  • What is a Data SeriesReport Acceleration
  • Transforming Data
  • Manipulating Data with eval
  • Formatting Data

Course Objectives

Module 1 - What is a Data Series
  • Introduce data series
  • Explore the difference between single-series, multi-series, and time series data series


Module 2 - Transforming Data
  • Use the chart, timechart, top, rare, and stats commands to transform events into data tables


Module 3 - Manipulating Data with eval Command
  • Understand dthe eval command
  • Explore and perform calculations using mathematical and statistical eval functions
  • Perform calculations and concatenations on field values
  • Use the eval command as a function with the stats command


Module 4 - Formatting Data
  • Use the rename command
  • Use the sort command