Skip to main content
List successful purchases and shape the results with fields, table, dedup, rename and sort. Launch Lab 4 in the IP Lab Portal

​
What you will do

  1. Search for successful purchases
  2. Keep only the fields you need with fields and table
  3. Remove duplicates with dedup
  4. Clean up the output with rename and sort

​
Before you start

Time

45 minutes

Role

admin

Module

Module 8: Splunk’s Search Language

  • Click Launch Lab 4 in the IP Lab Portal to open the lab page, then click Launch to start your machine.
  • Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
  • The course data is access_30DAY.log, linux_s_30DAY.log, db_audit_30DAY.csv and products.csv.
  • Review the slides in Module 8 Material before you start.