Database Reference
In-Depth Information
Getting data ready for reporting
Before you prepare a report, you often want to manipulate the data first to get it ready. In
other words, if you know the categories you want to end up with, you should group it the
way you want before processing. Splunk has two important ways to do this: tagging and
setting event types.
